potiuk commented on issue #1255: URL: https://github.com/apache/airflow-site/issues/1255#issuecomment-3470736558
> The issue is still outstanding. .htaccess currently contains: > > ``` > # CSP permissions for foo.apache.org - Adding 3rd party service Algolia. Approved by VP Data Privacy. > SetEnv CSP_PROJECT_DOMAINS "https://www.youtube-nocookie.com https://www.youtube.com https://airflow.apache.org" > ``` > > The comment does not agree with the settings, and there is no documentation for the entries.There is no need to include https://airflow.apache.org. Yes those are all good points. I barely restored what we had before and indeed - copied comment from the example in https://infra.apache.org/tools/csp.html and restored headers as they were originally - to fix the isssue with not loaded videos. And yes - I will be happy to correct all those once I got someone to review what we are doing. As instructed in the https://infra.apache.org/tools/csp.html I sent a question to [email protected] with question on whether what we do is good or not and asking for advices and I am patiently waiting for answers and guidance. I followed this advice: > If you need more specifically tailored headers, please reach out to [[email protected]](mailto:[email protected]) and we can assist you. I sent a question but ... I just checked and ... terrible mistake i sent it to users@airflow and not users@infra 🤦 -> autocomplete mistake... (so I am super happy you dragged my attention to it - thanks!) https://lists.apache.org/thread/hr63dfcwl7yd1npj08j3ym6gld50yyz0 I just resent it to users@infra: https://lists.apache.org/thread/l1c84nryh8lywj1fr8s435qb24dlrgot and if you want to make concrete suggestion and help us to understand if what we are doing is good - I think it's best to keep conversation there. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
