-
Type:
Bug
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 9.3
-
Fix Version/s: 9.10
-
Component/s: Web Common
-
Sprint:nxcore 9.10.2
-
Story Points:0
The plugin https://github.com/nuxeo-sandbox/nuxeo-pdfannotation-viewer stopped working on 9.3 because of a csp header error
Refused to load the image 'blob:https://dam-solution-93.cloud.nuxeo.com/f93bc753-6320-45be-8953-ec3c538437bc' because it violates the following Content Security Policy directive: "img-src * data:".
Adding the following contrib in studio solved the issue after a restart
<require>org.nuxeo.ecm.platform.web.common.requestcontroller.service.RequestControllerService.defaultContrib</require>
<extension target="org.nuxeo.ecm.platform.web.common.requestcontroller.service.RequestControllerService"
point="responseHeaders">
<header name="Content-Security-Policy">img-src data: blob: *; default-src * blob:; script-src 'unsafe-inline' 'unsafe-eval' data: *; style-src 'unsafe-inline' *; font-src data: *</header>
</extension>
