RocketChat / RocketChat/Rocket.Chat
Updated to 3.16. There was an error Content-Security-Policy
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Updated to 3.16. There was an error Content-Security-Policy
"Refused to load the script 'https://lib.usedesk.ru/secure.usedesk.ru/widget_111111.js' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback."
While disabled in the general settings Content-Security-Policy.
The documentation is empty https://github.com/RocketChat/docs/blob/master/guides/administration/administration/settings/setup-wizard.md
- You write "basically the inline scripts were moved to a js file" - in which one?
- How do I whitelist my script?
Originally posted by @DocDocTeam in https://github.com/RocketChat/Rocket.Chat/issues/20724#issuecomment-899493046
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with guides/administration/administration/settings/setup-wizard.md and the Content-Security-Policy error described in this issue. Trace the 3.16 change referenced by the linked issue to identify the JavaScript file involved and the supported whitelist procedure. Done means the documentation answers both questions and accurately reflects the setting behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100