This is an automated email from the ASF dual-hosted git repository.

achennaka pushed a commit to branch gh-pages
in repository https://gitbox.apache.org/repos/asf/kudu.git


The following commit(s) were added to refs/heads/gh-pages by this push:
     new 55b58c264 Add CSP tag to download scripts/images
55b58c264 is described below

commit 55b58c264f6123411cf4baa1d7dcd5ea1ed32dd0
Author: root <[email protected]>
AuthorDate: Thu Feb 6 19:18:14 2025 -0800

    Add CSP tag to download scripts/images
    
    Recently  we noticed Kudu website doesn't load a few elements which
    seem to be blocked due to CSP. Adding the appropriate tag to allow
    the content(scripts/images) to be downloaded and render the website
    accordingly.
    
    Change-Id: Id0d0307dc2b3c304781f6ec607bca7bb52379dab
    Reviewed-on: http://gerrit.cloudera.org:8080/22463
    Reviewed-by: Alexey Serbin <[email protected]>
    Tested-by: Abhishek Chennaka <[email protected]>
---
 _includes/top_common.html | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/_includes/top_common.html b/_includes/top_common.html
index 410178e53..5e84df44b 100644
--- a/_includes/top_common.html
+++ b/_includes/top_common.html
@@ -7,6 +7,15 @@
     <!-- The above 3 meta tags *must* come first in the head; any other head 
content must come *after* these tags -->
     <meta name="description" content="A new open source Apache Hadoop 
ecosystem project, Apache Kudu completes Hadoop's storage layer to enable fast 
analytics on fast data" />
     <meta name="author" content="Cloudera" />
+    <meta http-equiv="Content-Security-Policy" content="
+      default-src 'self';
+      script-src 'self' https://kudu.apache.org https://cdn.jsdelivr.net 
https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com 'unsafe-inline';
+      style-src 'self' https://kudu.apache.org https://fonts.googleapis.com 
https://maxcdn.bootstrapcdn.com 'unsafe-inline';
+      font-src 'self' https://fonts.gstatic.com 
https://maxcdn.bootstrapcdn.com data:;
+      img-src 'self' https://kudu.apache.org 
https://d3dr9sfxru4sde.cloudfront.net https://www.apache.org data:;
+      base-uri 'self';
+      form-action 'self';
+    ">
     <title>Apache Kudu - {{ page.title }}</title>
     <!-- Bootstrap core CSS -->
     <link rel="stylesheet" 
href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css";

Reply via email to