Project

General

Custom queries

Profile

Actions
Copy link

Bug #7907

closed

gravatars are now broken

Added by Ohad Levy over 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
1.7.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/1846
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

after #7805, gravatar external lookups are not allowed, and the following is observed in the logs:

Refused to load the image 'http://secure.gravatar.com/avatar/7dcac275cbd245fbf96a9a6d8739b880?d=mm&s=30' because it violates the following Content Security Policy directive: "img-src 'self' data:".

Related issues 1 (0 open — 1 closed)

Related to Foreman - Feature #7805: Add several security related HTTP headers - security hardening.ClosedJan Rusnacko10/03/2014Actions

Added by Shlomi Zadok over 10 years ago

Revision 2daac55f (diff)

fixes #7907 - Allow images from gravatar on secure headers

Actions
Copy link

Also available in: Atom PDF