Hi

Dne Sun, 03 Jul 2011 15:50:52 +0100
"George B." <[email protected]> napsal(a):

> The Javascript buttons in the Designer tool do not work. Messages like this 
> show up in Iceweasel error console:
> ---
> Warning: CSP: Directive "allow http://localhost"; violated by 
> javascript:Save2();
> Warning: CSP: Directive "allow http://localhost"; violated by 
> javascript:PDF_save();
> ---
> 
> This problem has been reported elsewhere, also workaround suggested:

It is also reported in upstream bug tracker:
https://sourceforge.net/tracker/?func=detail&aid=3324161&group_id=23067&atid=377408

> http://sourceforge.net/projects/phpmyadmin/forums/forum/72909/topic/4581207
> ---
> Everything was setup correctly, and seemed to work. When attempting to use 
> designer, the javascript buttons would not operate. No visible errors, thye 
> jsut did nothing. Checking the firefox error console showed : Warning: CSP: 
> Directive "allow <my phpmyadmin url> t" violated by 
> javascript:Start_relation(); A little searching about what CSP was led me to: 
> https://developer.mozilla.org/en/Security/CSP/Using_Content_Security_Policy.
> 
> Reading that page i found info about this header entry 
> X-Content-Security-Policy. Searching phpmyadmin pages for that i found it in 
> \libraries\header_http.inc.php.
> 
> Commenting out that line made everything work.
> ---

It does indeed work, but removes security features added by CSP.

-- 
        Michal Čihař | http://cihar.com | http://blog.cihar.com

Attachment: signature.asc
Description: PGP signature

Reply via email to