Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New approach to reload javascripts doesn't play well with CSP #50

Closed
jorgemanrubia opened this issue Dec 26, 2024 · 0 comments · Fixed by #51
Closed

New approach to reload javascripts doesn't play well with CSP #50

jorgemanrubia opened this issue Dec 26, 2024 · 0 comments · Fixed by #51
Assignees
@jorgemanrubia
Labels
bug Something isn't working

Comments

@jorgemanrubia
Copy link
Member

I introduced this one with the change from #44. I created it to support jsbundling initially and, while we ended up not needing it, I removed it as I thought it was a nice change. I'll revert to the old approach that worked well.

hotwire_spark-60a581cd.js:1441 Refused to load the script 'blob:http://know-it-all.localhost:3005/b78489c4-e200-4c6f-91da-fe5f095af9f8' because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-df3fa4dd3d6ec377f938d583df18e48a260b28f2'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
@jorgemanrubia jorgemanrubia self-assigned this Dec 26, 2024
@jorgemanrubia jorgemanrubia added the bug Something isn't working label Dec 26, 2024
jorgemanrubia added a commit that referenced this issue Dec 26, 2024
@jorgemanrubia @andryusha
Restore mechanism based on parsing import maps
4ee8258 
This won't cause trouble with CSP policies.

Fixes #50

Closes #49

It incorporates a fix for the problem that Andrey Maslov detected in #49: it wills support namespaced stimulus controllers.

Co-authored-by: Andrey Maslov <[email protected]>
@jorgemanrubia jorgemanrubia mentioned this issue Dec 26, 2024
Merged
1 task
jorgemanrubia added a commit that referenced this issue Dec 26, 2024
@jorgemanrubia @andryusha
Restore mechanism based on parsing import maps
1434832 
This won't cause trouble with CSP policies.

Fixes #50

Closes #49

It incorporates a fix for the problem that Andrey Maslov detected in #49: it wills support namespaced stimulus controllers.

Co-authored-by: Andrey Maslov <[email protected]>
jorgemanrubia added a commit that referenced this issue Dec 26, 2024
@jorgemanrubia @andryusha
Restore mechanism based on parsing import maps
c919fd0 
This won't cause trouble with CSP policies.

Fixes #50

Closes #49

It incorporates a fix for the problem that Andrey Maslov detected in #49: it wills support namespaced stimulus controllers.

Co-authored-by: Andrey Maslov <[email protected]>
jorgemanrubia added a commit that referenced this issue Dec 26, 2024
@jorgemanrubia @andryusha
Restore mechanism based on parsing import maps
d4f2623 
This won't cause trouble with CSP policies.

Fixes #50

Closes #49

It incorporates a fix for the problem that Andrey Maslov detected in #49: it wills support namespaced stimulus controllers.

Co-authored-by: Andrey Maslov <[email protected]>
jorgemanrubia added a commit that referenced this issue Dec 26, 2024
@jorgemanrubia @andryusha
Restore mechanism based on parsing import maps
8136c66 
This won't cause trouble with CSP policies.

Fixes #50

Closes #49

It incorporates a fix for the problem that Andrey Maslov detected in #49: it wills support namespaced stimulus controllers.

Co-authored-by: Andrey Maslov <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jorgemanrubia jorgemanrubia

Labels
bug Something isn't working
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Avoid CSP violations when reloading stimulus controllers hotwired/spark
1 participant
@jorgemanrubia