Cannot add theme due to CSP
13zebras opened this issue · comments
After following your directions step by step here:
https://docs.standardnotes.com/extensions/local-setup
I received the error below in the console in SN 3.14.1
app.js:2 Refused to load the stylesheet 'http://localhost:8001/new.css' because it violates the following Content Security Policy directive: "style-src 'unsafe-inline' 'self' http://127.0.0.1:45653". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.
I would suggest either an update to provided instructions as to how to mitigate this error OR some change internally to make this error discontinue. It makes SN unusable as I need a custom theme to account for my visual difficulties. I had one created and used locally until an update last year modified how themes work at the local level. Now SN is unusable.
Can you try http://127.0.01/new.css? We'll introduce a patch not in the next release (scope is frozen for that), but the one after.
Same with http://127.0.0.1/new.css or http://127.0.0.1:8001/new.css
I can open the .css file in a browser at http://127.0.0.1:8001/new.css or localhost
And SN will not load the ext.json file without the port number 8001.
When will the release happen with the patch? Thanks.
Having the same issue and would like to know the resolution