community page issue with avatar of contributor
Grummfy opened this issue · comments
Error from Chrome 59 console:
Refused to load the image 'https://github.com/Hywan.png?size=60' because it violates the following Content Security Policy directive: "default-src 'self' *.hoa-project.net *.hoa.io *.github.io *.github.com *.discourse.org *.tile.openstreetmap.org 'unsafe-inline' 'unsafe-eval'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
…
It appear that github.com isn't allowed (without a sub-domain) by the header security rule : Content-Security-Policy:default-src 'self' *.hoa-project.net *.hoa.io *.github.io *.github.com *.discourse.org *.tile.openstreetmap.org 'unsafe-inline' 'unsafe-eval';.
Fixed! Thanks for the report!
And @Metalaka was correct 👍.