Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Torrent Viewer CSP rule blocks <iframe> content #7366

Merged
merged 1 commit into from
Mar 17, 2017
Merged

Torrent Viewer CSP rule blocks <iframe> content #7366

merged 1 commit into from
Mar 17, 2017

Commits on Feb 23, 2017

  1. Torrent Viewer CSP rule blocks <iframe> content

    Torrent content is rendered into <iframe> when it's not video or audio
    content. For example, a .jpg or a .pdf file. This is because we're
    using a viewer page that includes the content; we're not returning the
    content directly.
    
    This is because the torrent may not be active and in that case, we show
    the "Start Download?" page.
    
    When this occurs, CSP prevents the iframe from loading content from the
    webtorrent server at http://localhost:port
    
    This is because we only make a CSP exception for media elements, not
    iframe elements. This is an easy fix.
    
    Fixes: #7243
    feross committed Feb 23, 2017
    Configuration menu
    Copy the full SHA
    32f6b0e View commit details
    Browse the repository at this point in the history