My bad - that was supposed to be sent to users@infra :) On 2025/10/27 21:22:34 Jarek Potiuk wrote: > Hello dear Infra. > > Recently Sebb made us aware about the > https://infra.apache.org/tools/csp.html CSP builder (we were overriding CSP > headers in our `.htacces` in Airflow). > > I initially removed it - thinking that we needed it for "use cases" > videos - and there we have static images and click-through to open youtube > videos. But we also have this page where we embed images and allow to > "click to play" for the videos have https://airflow.apache.org/meetups/ so > I added the CSP back in the way described in the CSP builder. > > Now - I would like to double-check if the CSP settings we have is "OK" > (this is what the page says - to reach out here - to make sure that > everything - both in the CSP and the way how we embed the images in the > https://airflow.apache.org/meetups/ page is OK - as I am not entirely sure > if what we do is OK. > > J. >
--------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
