https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43832
--- Comment #10 from Frédéric Demians <[email protected]> --- (In reply to Owen Leonard from comment #9) > I don't know if the example is meant to be comprehensive but I found I also > need ed these in the script-src section: > > https://books.google.com https://openlibrary.org > > And these in the img-src section: > > https://openlibrary.org https://archive.org It's supposed to be documented in koha-conf.xml, per provider: - GoogleJackets: script-src https://books.google.com img-src https://books.google.com CSP is a clear nuisance. Otherwise, instead of having admins configure CSP permissions for cover providers one by one, we could just as well settle on an exhaustive list of these providers. After all, their URLs should be very, very stable and safe. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug. _______________________________________________ Koha-bugs mailing list -- [email protected] To unsubscribe send an email to [email protected] website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
