apollographql / apollographql/embeddable-explorer
CSP error from studio.apollographql.com
- Dominant language
- TypeScript
- Stars
- 3
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
It looks like the CSP header for studio.apollographql.com has a typo, which breaks the login features on the embed.
The error is
```
Refused to frame 'https://studio.apollographql.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors sandbox.embed.apollograpql.com embeddable-sandbox.netlify.app".
```
this shows
`sandbox.embed.apollograpql.com`
when it should be
`sandbox.embed.apollographql.com`
Contributor guide
No contributing guide indexed for this repository
Research direction
Search the repository for the misspelled sandbox.embed.apollograpql.com hostname and trace where the CSP or embed configuration is defined. Verify the corrected hostname against the reported browser error and confirm that the studio.apollographql.com login flow loads without a CSP frame-ancestors violation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100