Project

General

Profile

Actions

Bug #17084

closed

Webpack dev server missing from CSP on "Welcome" pages

Added by Sebastian Gräßl about 8 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Low
Category:
Web Interface
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

When in foreman is run in development and a welcome page is triggered (for example on /environments) when no entries exist yet.

This is done via a `before_filter` in the Application controller, when the welcome filter calls render it'll skip all before filters following.
One of the skipped filters is 'allow_webpack' which should add the webpack_dev server to the CSP rule, when this is not done the browser won't load the bundled CSS and JS and throw JS errors.

This is only a bug for development environments, therefore I'll set it to Low.


Related issues 1 (0 open1 closed)

Related to Foreman - Feature #9117: Update to secure_headers 3.xClosedTomer Brisker01/26/2015Actions
Actions

Also available in: Atom PDF