Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Homebrew logo in header fails to load due to CSP violation #955

Closed
1 task done
surajgoraya opened this issue Aug 22, 2023 · 0 comments · Fixed by #956
Closed
1 task done

Homebrew logo in header fails to load due to CSP violation #955

surajgoraya opened this issue Aug 22, 2023 · 0 comments · Fixed by #956
Labels

Comments

@surajgoraya
Copy link

  • your issue is with the https://formulae.brew.sh website and not the (generated) contents of a given formula/cask page.

This issue isn't really important (since it's mostly visual), however, I thought it might be worthwhile to create an issue in-case it went unnoticed.

What you were trying to do (and why)

Attempting to look up a formula on formulae.brew.sh to download a utility.

What happened (include screenshots)

Upon loading any page on formulae.brew.sh, a broken image appears in the header of the website, above the title of the formulae.

This can also be replicated on Formula as well as the homepage pages:

Screenshot of the coreutils formula page

Edge/Chrome dev tools indicate the following error:

Refused to load the image 'https://brew.sh/assets/img/homebrew-256x256.png' because it violates the following Content Security Policy directive: "img-src 'self' https://avatars2.githubusercontent.com https://avatars.githubusercontent.com".

I was able to replicate this on on Microsoft Edge Version 115.0.1901.203 (Official build) , as well as Safari and Firefox on MacOS.

What you expected to happen

An image featuring the homebrew logo/avatar should load and display at the top of the page.

@Bo98 Bo98 closed this as completed in #956 Aug 23, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 23, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant