[
https://issues.apache.org/jira/browse/OPENMEETINGS-2247?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17085410#comment-17085410
]
Maxim Solodovnik commented on OPENMEETINGS-2247:
------------------------------------------------
OK, here is the answer:
[https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src]
*Note:* {{connect-src 'self'}} does not resolve to websocket schemas in all
browsers, more info: [https://github.com/w3c/webappsec-csp/issues/7]
I'll take care of it and will ask you to test
Thanks for report :))
> CSP should be re-worked
> -----------------------
>
> Key: OPENMEETINGS-2247
> URL: https://issues.apache.org/jira/browse/OPENMEETINGS-2247
> Project: Openmeetings
> Issue Type: Task
> Components: Builds, UI
> Affects Versions: 5.0.0-M4
> Reporter: Maxim Solodovnik
> Assignee: Maxim Solodovnik
> Priority: Major
> Fix For: 5.0.0-M4
>
> Attachments: image-2020-04-17-14-37-11-501.png,
> image-2020-04-17-14-59-08-307.png, image-2020-04-17-15-16-37-187.png
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Previously CSP was implemented via
> {{header.csp.frame.options}} and {{header.content.security.policy}}
> https://openmeetings.apache.org/GeneralConfiguration.html
> Above setting were applied here
> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java#L244
> This should be re-worked
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
