Niall Pemberton created ATTIC-235: ------------------------------------- Summary: Fix Project Website Rendering/Navigation Issues caused by the CSP Key: ATTIC-235 URL: https://issues.apache.org/jira/browse/ATTIC-235 Project: Attic Issue Type: Task Reporter: Niall Pemberton
The implementation of the *_Content Security Policy_* (CSP) at the beginning of March 2025 has affected either the rendering or menus of seven project websites that are retired. * Only the home pages of project websites were checked, so there could be issues in other areas. * 37 Projects were completely unaffected by the CSP (3 don't have websites - ojb, joshua & quetz) * Other CSP issues that didn't seem to affect rendering or navigstion were ignored (Fonts, Search, Images, YouTube, Twitter, JS etc) h1. RENDERING The following sites have Rendering Issues (i.e. look a mess): h3. AURORA *Description:* [Aurora|https://aurora.apache.org/] not rendering correctly because the CSP is preventing the bootstrap.min.css from loading. Add local copy to fix. * Deployed Site: [github.com/apache/aurora-website (asf-site)|https://github.com/apache/aurora-website/tree/asf-site] * Deployed Site Chnages: [github.com/niallkp/aurora-website (asf-site)|https://github.com/niallkp/aurora-website/tree/asf-site] h3. LUCY *Description:* [Lucy|https://lucy.apache.org/] not rendering correctly because the CSP is preventing the apache.org/css/style.css from loading.There are three ways to fix this issue 1) add the style sheets locally 2) add a .htaccess file to allow https://*.apache.org to src-style or 3) Get the CSP changed (see INFRA-26679) * Site Source: [https://svn.apache.org/repos/asf/lucy/site/trunk/] * Site Source Patch: *svn-lucy-source-style.patch* * Deployed Site: [https://svn.apache.org/repos/infra/sites/lucy/content/] * Deployed Site Patch: *svn-lucy-deployed-style.patch* h3. TRAFODION *Description:* [Trafodion|https://trafodion.apache.org/] not rendering correctly because the CSP is preventing the CSS(3) & JS(3) from loading. Add local copies to fix. * Deployed Site: [github.com/apache/trafodion-site (asf-site)|https://github.com/apache/trafodion-site/tree/asf-site] * Deployed Site Chnages: [github.com/niallkp/trafodion-site (asf-site)|https://github.com/niallkp/trafodion-site/tree/asf-site] h3. TWILL *Description:* [Twill|https://twill.apache.org/] not rendering corretcly because the CSP is preventing the bootstrap css's & jQuery from loading. Add these local copies to site. * Deployed Site: [https://svn.apache.org/repos/asf/twill/site/] * Deployed Site Patch: *twill-css-js.patch* in ATTIC-230 h1. NAVIGATION The following sites menus don't work: h3. ACE *Description:* [Ace|https://ace.apache.org/] menus don't work because the CSP is preventing jQuery from loading. Fix adds a local copy of jQuery. * Site Source: [https://svn.apache.org/repos/asf/ace/site/trunk/] * Site Source Patch: *svn-ace-source-jquery.patch* * Deployed Site: [https://svn.apache.org/repos/infra/sites/ace/content/] * Deployed Site Patch: *svn-ace-deployed-jquery.patch* h3. ODE *Description:* [ODE|https://ode.apache.org/] menus don't work because the CSP is preventing jQuery from loading. Fix adds a local copy of jQuery. * Site Source: [https://svn.apache.org/repos/asf/ode/site/trunk/] * Site Source Patch: *svn-ode-source-jquery.patch* * Deployed Site: [https://svn.apache.org/repos/infra/sites/ode/content/] * Deployed Site Patch: *svn-ode-deployed-jquery.patch* h3. RAVE *Description:* [Rave|https://rave.apache.org/] menus don't work because the CSP is preventing jQuery & Bootstrao from loading. Fix adds a local copy of jQuery & Bootstrap. * Site Source: [https://svn.apache.org/repos/asf/rave/site/trunk/] * Site Source Patch: *svn-rave-source-js.patch* * Deployed Site: [https://svn.apache.org/repos/infra/sites/rave/content/] * Deployed Site Patch: *svn-rave-deployed-js.patch* -- This message was sent by Atlassian Jira (v8.20.10#820010)