Im not familiar with a architecture of Mulet, but I can see the issue, there is 
a workaround. We might want to relax the CSP a little for debug builds if this 
is a consistent problem.

The issue is that the CSP policy only allows “self” but you are loading 
app://homescreen.gaiamobile.org/js/setup.js 
<app://homescreen.gaiamobile.org/js/setup.js> which is loading resources from 
http://homescreen.gaiamobile.org:8080 <http://homescreen.gaiamobile.org:8080/>.

So fix here is either:

a) load the homescreen from http://homescreen.gaiamobile.org:8080 
<http://homescreen.gaiamobile.org:8080/>

b) relax the CSP so that it allows the debug URLs. Change the 
“security.apps.certified.CSP.default” preference from 
        default-src * data: blob:; script-src 'self'; object-src 'none'; 
style-src 'self' 'unsafe-inline' app://theme.gaiamobile.org 
<app://theme.gaiamobile.org>
to 
        default-src * data: blob:; script-src ‘self’ *.gaiamobile.org 
<http://gaiamobile.org/>; object-src 'none'; style-src 'self' 'unsafe-inline' 
app://theme.gaiamobile.org <app://theme.gaiamobile.org> *.gaiamobile.org


> On 31 Oct 2015, at 2:04 pm, James Burke <[email protected]> wrote:
> 
> This is great, thanks to all who worked on restoring the builds!
> 
> Using the latest Mac build from the link below and using master via
> `DEBUG=1 DESKTOP=0 make` in Mulet, I am seeing a lot of CSP errors
> that seem to result in an inoperable home screen, I filed this bug to
> track that:
> https://bugzilla.mozilla.org/show_bug.cgi?id=1220330
> 
> James
> 
> On Thu, Oct 29, 2015 at 9:34 PM, J. Ryan Stinnett <[email protected]> wrote:
>> It looks like things are working again!
>> 
>> https://tools.taskcluster.net/index/artifacts/#gecko.v2.mozilla-central.latest.b2g/gecko.v2.mozilla-central.latest.b2g.win32-mulet-opt
>> https://tools.taskcluster.net/index/artifacts/#gecko.v2.mozilla-central.latest.b2g/gecko.v2.mozilla-central.latest.b2g.macosx64-mulet-opt
> _______________________________________________
> dev-fxos mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-fxos

_______________________________________________
dev-fxos mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-fxos

Reply via email to