Some fetch requests are blocked on hubs.mozilla.org

[jdm]

I've traced one of them down to being rejected by a CSP policy. I believe that

servo/components/net/fetch/methods.rs

Line 166 in e616284

initiator: csp::Initiator::None,

is incorrect.

[jdm]

The relevant CSP directive is:

connect-src https://hubs.link https://hub.link https://sentry.prod.mozaws.net https://assets-prod.reticulum.io https://uploads-prod.reticulum.io https://smoke-assets-prod.reticulum.io https://asset-bundles-prod.reticulum.io https://smoke-asset-bundles-prod.reticulum.io https://hubs-proxy.com wss://hubs.mozilla.com wss://smoke-hubs.mozilla.com https://www.mozilla.org https://hubs.local:3000 'self' https://cors-proxy-prod.reticulum.io:443 https://uploads-prod.reticulum.io   https://dpdb.webvr.rocks https://nearspark-prod.reticulum.io:443 https://*.reticulum.io:443 wss://*.reticulum.io:443 wss://*.reticulum.io:443 https://*.reticulum.io:443 wss://:443 https://:443 https://cdn.aframe.io https://www.youtube.com https://api.github.com data: blob:;

We're connecting to https://lucid-ardent.reticulum.io:443/meta, which should be valid.

[jdm]

This looks like a bug in the content-security-policy crate - the port comparison ends up comparing :443 from the directive and 443 from the URL and decides they don't match.

[jdm]

Submitted rust-ammonia/rust-content-security-policy#30 upstream to correct it.