Skip to content
This repository has been archived by the owner on Nov 6, 2020. It is now read-only.

Fix dapps CSP when UI is exposed externally #6178

Merged
merged 5 commits into from Aug 10, 2017
Merged

Fix dapps CSP when UI is exposed externally #6178

merged 5 commits into from Aug 10, 2017

Conversation

tomusdrw
Copy link
Collaborator

Closes #6174

Also contains a fix to dapps development using latest inject.js, cc @kaikun213

@tomusdrw tomusdrw added A0-pleasereview 🤓 Pull request needs code review. B0-patch M4-core ⛓ Core client code / Rust. labels Jul 28, 2017
@rphmeier
Copy link
Contributor

I wonder if this also fixes the issues with DApps that I had on the light client where the page was completely blank.

Some(hosts) => extra_embed.extend(hosts.into_iter().filter_map(|host| {
let mut it = host.split(":");
let host = it.next();
let port = it.next().and_then(|v| u16::from_str(v).ok());
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess we don't really care if the settings are invalid? (more than one colon, port not being valid uint?)

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, we always attempt to parse hosts/origins in the best way we can.

@gavofyork gavofyork added A8-looksgood 🦄 Pull request is reviewed well. and removed A0-pleasereview 🤓 Pull request needs code review. labels Aug 10, 2017
@gavofyork gavofyork merged commit 65482c5 into master Aug 10, 2017
@gavofyork gavofyork deleted the dapps-fix branch August 10, 2017 16:32
arkpar pushed a commit that referenced this pull request Aug 18, 2017
* Allow embeding on any page when ui-hosts=all and fix dev_ui

* Fix tests.
arkpar added a commit that referenced this pull request Aug 19, 2017
* overflow check in addition

* add test

* Unexpose methods on UI RPC. (#6295)

* Add more descriptive error when signing/decrypting using hw wallet.

* format instant change proofs correctly

* propagate stratum submit share error upstream, fixes #6258 (#6260)

* updated jsonrpc (#6264)

* Using multiple NTP servers (#6173)

* Small improvements to time estimation.

* Allow multiple NTP servers to be used.

* Removing boxing.

* Be nice.

* Be nicer.

* Update list of servers and add reference.

* Fix dapps CSP when UI is exposed externally (#6178)

* Allow embeding on any page when ui-hosts=all and fix dev_ui

* Fix tests.

* Fix cache path when using --base-path (#6212)

* Time should not contribue to overall status. (#6276)

* v1.7.1
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
A8-looksgood 🦄 Pull request is reviewed well. M4-core ⛓ Core client code / Rust.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

DApps not accessible in 1.7.0
4 participants