Allow different urls to prevent csp errors with theming.

[icicle1133]

Problem

Custom css backgrounds

Proposed solution

Allow the .webp format to be used, right now im trying to use:
https://i.giphy.com/PLJeLzh6gfL2LhUIW0.webp
and since csp blocks that url, i upload it to a community i make, but then its no longer animated

EDIT: Also possibly allow github urls (e.g. raw.githubusercontent.com, *.github.io, github.com, etc)

Checks

• I searched for existing issues and didn't find a duplicate.

[nesges]

I get that it's inconvinient, but CSP is way to important to deactivate it for arbitrary websites, not in control of fluxer

[icicle1133]

I get that it's inconvinient, but CSP is way to important to deactivate it for arbitrary websites, not in control of fluxer

i never said anything about deactivating. i simply said add urls to be allowed.

[zulc22]

What if there were uploads/assets associated with themes? Allowing the user to add their own CSP domains is a very band-aid fix.

Current solutions are to either convert everything to data: URIs or upload your files to Fluxer itself via a dump server or Personal Notes, as the CSP policy allows the uploaded-files server.

[retcinder]

What if there were uploads/assets associated with themes? Allowing the user to add their own CSP domains is a very band-aid fix.

Current solutions are to either convert everything to data: URIs or upload your files to Fluxer itself via a dump server or Personal Notes, as the CSP policy allows the uploaded-files server.

This does sound like an interesting solution but I personally think CSP domain adding would be better.

[retcinder]

This would be really handy. I personally would need codeberg to be accessible (as it wouldn't be feasible for 20+ images to be loaded from saved media).

Given that it would be a security issue to enable it globally on specific sites, perhaps it can be a GUI popup on a per git-repository/base-url basis? (So, prompt to enable it on exampledomain/foo/bar-theme, allowing any file to be loaded from a URL matching that description IF THE USER AUTHORISES IT)

[icicle1133]

Oooo, very nice. Hoping you do end up making a PR for it (with codeberg URL support) :3

unfortunately:

edit: @tulpenkiste i dont know what codeberg is so please reply with some urls for it and i will add it in!

[retcinder]

edit: @tulpenkiste i dont know what codeberg is so please reply with some urls for it and i will add it in!

Codeberg is another site for hosting git repositories, I use it for all of my personal projects. You can find more information about it at here.

[icicle1133]

edit: @tulpenkiste i dont know what codeberg is so please reply with some urls for it and i will add it in!

Codeberg is another site for hosting git repositories, I use it for all of my personal projects. You can find more information about it at here.

5bd02d2

here are my changes with codeberg support, if only i could make a pr 😢

[retcinder]

I think you forgot to add the codeberg URLs, I only see github there

[retcinder]

You would only need to add https://codeberg.org and maybe https://*.codeberg.page though, so easy fix

[hampus-fluxer]

This has moved to feedback.fluxer.com: https://feedback.fluxer.com/p/909

Comments and votes came along with it. Sign in with your Fluxer account, then go to Settings > GitHub account to claim your posts and comments from GitHub. This thread is now locked.