nostream icon indicating copy to clipboard operation
nostream copied to clipboard

[BUG] CSP error on terms.html

Open mdavids opened this issue 2 years ago • 2 comments

Describe the bug I visited our server https://nostr.example.nl/terms (not it's real name) and got the terms.html, but is was rather simple. As it turns out there are some Content-Security-Policy issues:

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' https://cdn.jsdelivr.net/npm/".

To Reproduce Steps to reproduce the behavior:

  1. Visit, with a browser, https://server.domain.tld/terms
  2. Look in the 'developer tools console' of the browser

Expected behavior

No CSP error(s), nicer formatted page.

Screenshots

N/A

System (please complete the following information):

  • OS: Ubuntu 22.04
  • Platform: Docker
  • Version: 1.19.0 (according to NIP-11 output)

Logs

N/A

Additional context

I'm new to nostream, so I'm not sure where exactly the Content-Security-Header is set and defined. So i'm sorry if I'm signalling the issue at the wrong place.

I followed these steps for installation: https://andreneves.xyz/p/set-up-a-nostr-relay-server-in-under

mdavids avatar Feb 03 '23 16:02 mdavids

Thanks for the report!

cameri avatar Feb 03 '23 18:02 cameri

@mdavids I am unable to reproduce this issue. Are you still having it? If so, can you provide a copy of your settings file and your relay URL?

cameri avatar Feb 15 '23 06:02 cameri