snoopdave opened a new pull request, #183:
URL: https://github.com/apache/roller/pull/183

   Two small fixes prompted by a user testing 6.1.6 RC1.
   
   ## Preset theme CSP blocks webfonts
   The Content-Security-Policy meta tag added to the preset themes in 6.1.2 
sets `default-src 'none'` with no `font-src` directive, so `@font-face` 
webfonts fall back to `'none'` and are blocked, while the CSS still loads. In 
the `gaurav` theme this leaves the Font Awesome icons (the search box glyph, 
the "posted on" clock, etc.) blank even though the stylesheet applies.
   
   Adding `font-src 'self'` restores same-origin webfonts. All five preset 
themes carry the same policy string, so they are updated together to keep it 
consistent; `gaurav` is the one that actually ships webfonts today (Font 
Awesome 3.2.1 and Bootstrap Glyphicons, served same-origin).
   
   ## H2 2.5.250 reserves VALUE
   H2 2.5.250 made `VALUE` a reserved word, and several Roller tables use it as 
a column name (e.g. `roller_properties`), so Roller fails to read them on that 
H2. H2 is not an officially supported database (PostgreSQL, MySQL and Derby 
are), so this documents the `;NON_KEYWORDS=VALUE` JDBC URL workaround in the 
install guide rather than changing the schema.
   
   https://claude.ai/code/session_015X69HHQ5XnjRkJP8ymzwFf


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to