Sitecore / Sitecore/XM-Cloud-Introduction
MVP site: Profile avatar photos hosted on community.sitecore.com were blocked by the CSP
Nobody has claimed this yet.
- Dominant language
- CSS
- Stars
- 52
- Forks
- 58
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Profile avatar photos hosted on community.sitecore.com were blocked by the CSP, causing images to fail to load.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Avatar photos from community.sitecore.com should load successfully without being blocked by the Content Security Policy. Users viewing profile pages will see the avatar images displayed correctly instead of broken image icons or CSP violation errors in the browser console..
Screenshots
Desktop:
- OS: Win11
- Browser: chrome
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by opening the linked Directory/Profile URL in Chrome and checking the browser console for the CSP violation. Locate the MVP site's CSP configuration, allow the community.sitecore.com image source, and verify that the profile avatar loads without a CSP error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- nextjs
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 58/100