umputun / remark42

85%

master: 85%

LAST BUILD ON BRANCH paskal/fix_img_src_CSP

branch: paskal/fix_img_src_CSP

CHANGE BRANCH

x

Reset

Sync Branches

• paskal/fix_img_src_CSP
• master
• code-colors
• anon-names
• image_interface_fixes
• remove_golangci_conf
• go-1.14
• admin_email_notifications
• examples-ci-issue
• termination_fix
• img_types
• bump_modules
• tests_fixes
• fix_memory_store_tests_panic
• remove_unused_cache
• proxy_images
• bump_ci_go_version
• simplify_img_storage
• img_commit_on_start
• tests_golangci_lint
• github_golangci_lint
• fix_unclosed_body
• proxy_image_commit
• refs/tags/v1.6.0
• refs/tags/backend/v1.6.0
• gocritic
• go-consistent
• switch_to_lcw
• pkgs-rename
• bump_tollbooth
• code_cleanup
• sameip-correction-vote-728
• fix_error_wrap
• distributed_cache
• site_email_notifications
• bump_lcw
• paskal/multiple-admin-emails
• docker_bump
• paskal/notifications_rework
• paskal/recursive_email_notifications
• paskal/clarify_email_notifications
• paskal/simplify_admin_emails
• paskal/send_jwt_header
• paskal/clean_stream
• frame-ancestors
• frontend-infrastructure
• new-auth
• same-site
• lazy-image
• hide-vote-iphash
• fix-admin-names
• sanitize-loactor
• sanitize-hotfix-1.6
• refs/tags/v1.6.1
• refs/tags/backend/v1.6.1
• paskal/notify_drops_test
• paskal/notify-drops-tail
• upd-backend-deps
• bluemonday-bump
• refs/tags/v1.7.0
• refs/tags/backend/v1.7.0
• refs/tags/v1.7.1
• refs/tags/backend/v1.7.1
• deps-bump
• refs/tags/v1.8.0
• refs/tags/v1.8.1
• update-docs-1.7
• paskal/secret-clarify
• 965-fix-error-on-restricted-words
• add-module-type
• bump-deps
• add-cssnano
• named-exports
• disqus-fix
• paskal/improve_tests
• dverhoturov/renew_image_on_load
• dverhoturov/docker
• admin-edit
• listen-address
• paskal/close_body
• dverhoturov/validate_image_before_post
• paskal/small_improvements
• paskal/simplify_extract_pictures
• paskal/new_telegram_key
• paskal/telegram_auth
• paskal/auth_fixes
• paskal/fix_timeout
• paskal/deprecation_update
• paskal/clarify_notifications
• paskal/fix_email_templates
• paskal/telegram_notify
• postmessage-to-child
• paskal/notify_improvements
• paskal/user_detail_telegram
• paskal/telegram_notify_params
• site
• paskal/fix_telegram_cli
• user-info
• paskal/bump-ci
• paskal/md_ci
• jwt-migration
• update-go-version
• editorconfig-double-quotes-yml
• paskal/fix_telegram_auth
• paskal/bump_auth
• Ksinia/master
• paskal/bump_modules
• paskal/test_user_replies
• paskal/data_race
• paskal/fix_ticker
• dverhoturov/privatePreview
• paskal/fix_telegram_escape
• paskal/improve_telegram_notify
• paskal/generic_fixes
• paskal/improve_telegram_flow
• paskal/doc_split
• paskal/telegram-update
• paskal/golangci-lint-update
• migrate-to-testing-library
• paskal/fix_notify_deprecation
• paskal/telegram_channel
• paskal/fix_telegram_format
• paskal/notify
• paskal/docs
• refs/tags/v1.9.0
• refs/tags/v1.9.1
• refs/tags/v.1.9.0
• refs/tags/backend/v1.9.0
• refs/tags/backend/v1.8.1
• refs/tags/v1.9.2
• paskal/deprecated_params
• paskal/tg_qr
• paskal/bump_dependencies
• paskal/no_path
• user-comments-empy-200
• move-subscribe-ui-elements
• generate-telegram-translations
• paskal/borderless_qr
• paskal/deprecated_notifications
• paskal/docs_from_wiki
• paskal/optimise_images
• paskal/increase_timeout
• go-1.17
• paskal/tests
• paskal/new_errors
• paskal/notify_migration
• unsinitize
• paskal/tests_cleanup
• links-rune
• paskal/params
• paskal/clarify_docs
• paskal/email
• refs/tags/v1.10.0
• refs/tags/backend/v1.10.0
• valid-email-auth
• refs/tags/v1.10.1
• paskal/allowed_hosts
• autofill-email-for-subscription
• add-api-sdk
• paskal/dev_provider
• switch-to-pnpm
• paskal/bump_chroma
• paskal/modules_update
• workspaces
• use-packages
• ci-workflows
• dverhoturov/docker_ci_build
• paskal/bump_tollbooth
• packages
• paskal/disable_md_sanitize
• paskal/clarify_commands
• paskal/docker_labels
• paskal/no_getstarted
• paskal/telegram_notify_clarity
• paskal/no_mod_vendor
• paskal/go_embed_templates
• paskal/fix_variable
• paskal/go_embed
• e2e
• paskal/debug_verify
• paskal/allow_dash_in_email_siteid
• paskal/bump_mockery
• dependabot/npm_and_yarn/site/node-fetch-3.2.10
• paskal/pngcrush
• paskal/proper_site_id
• paskal/rpc_panic
• paskal/golangcilint_bump
• fix-iframe-resize
• paskal/moq
• paskal/email_login_auth
• paskal/renew_cache_on_delete
• refs/tags/v1.11.0
• refs/tags/backend/v1.11.0
• paskal/typos
• paskal/fix_log
• paskal/siteid_dot
• paskal/duplicate_types
• paskal/remove_put
• paskal/remove_deprecated_param
• paskal/bump_actions
• refs/tags/v1.11.1
• paskal/remove_common_shared_secret
• paskal/aud_per_site
• refs/tags/v1.11.2
• refs/tags/backend/v1.11.2
• paskal/fix_double_close
• paskal/apple
• paskal/apple_bad_key_test
• paskal/apple_frontend
• paskal/email_subscription_post
• paskal/easy_subscription
• paskal/twitter_blockquote_class
• paskal/comment_validation
• paskal/token_instructions
• refs/tags/v1.11.3
• refs/tags/backend/v1/11/3
• refs/tags/backend/v1.11.3
• paskal/clarify_cache_for_frontend
• akellbl4/editorconfig
• dependabot/go_modules/backend/_example/memory_store/golang.org/x/image-0.5.0
• dependabot/go_modules/backend/_example/memory_store/golang.org/x/net-0.7.0
• paskal/bump_golangci_lint
• paskal/bump_go_modules
• paskal/telegram_notifications
• paskal/clarify_password
• paskal/fix_image_proxy
• refs/tags/v1.12.0
• refs/tags/backend/v1.12.0
• refs/tags/v1.12.1
• paskal/CWE-918
• paskal/clean_title_and_username
• paskal/err_fix
• paskal/consistent_info
• dependabot/npm_and_yarn/site/luxon-2.5.2
• paskal/simlify_boltdb_info
• paskal/datastore_info_combine
• paskal/allowed_domains_exact_match
• ak/update-node
• paskal/comments_pagination
• paskal/raw_quotes
• paskal/fix_commento_import
• paskal/cleanup_images_on_delete
• paskal/commento_url
• paskal/min_comment_size
• paskal/update-images
• paskal/update-go-modules
• ak/raw-content-styles
• ak/cleanup-comment-form
• ak/compose-button-styles
• mkdocs
• paskal/fix_backup_error
• paskal/golangci_lint
• paskal/lcw_v2
• paskal/find_tests
• paskal/better_info
• paskal/readonly_find_test
• dependabot/go_modules/backend/google.golang.org/protobuf-1.33.0
• paskal/fix_refresh_tokens_cache
• paskal/improve_get_user
• paskal/jwt_v5
• paskal/fix_golangci_lint
• refs/tags/v1.30.0
• refs/tags/backend/v1.13.0
• refs/tags/v1.13.0
• paskal/dependabot
• paskal/update_dockerfiles
• dependabot/npm_and_yarn/site/ws-8.17.1
• dependabot/npm_and_yarn/site/braces-3.0.3
• dependabot/npm_and_yarn/site/ejs-3.1.10
• paskal/fix_webhook_json
• img_route_verification
• refs/tags/v1.13.1
• refs/tags/backend/v1.13.1
• paskal/update_modules
• paskal/image_proxy_blacklist
• paskal/csp
• paskal/fix_logout
• paskal/improve_docker_build
• dependabot/npm_and_yarn/site/micromatch-4.0.8
• paskal/fix_avatar_types
• paskal/discord_poc
• paskal/update_discreet_variables
• paskal/docker-compose
• paskal/deprecate_twitter
• paskal/update_doc
• refs/tags/v1.14.0
• refs/tags/backend/v1.14.0
• dependabot/go_modules/backend/go-modules-updates-f692995c50
• paskal/update_go
• paskal/fix_docker
• dependabot/npm_and_yarn/frontend/e2e/npm-modules-updates-for-tests-32faa27b51
• dependabot/npm_and_yarn/frontend/apps/remark42/npm-modules-updates-33950cb83c
• dependabot/npm_and_yarn/site/npm-modules-updates-for-tests-284cb22f28
• dependabot/npm_and_yarn/frontend/packages/api/npm-modules-updates-for-tests-f28c5bd690
• dependabot/npm_and_yarn/frontend/apps/remark42/npm-modules-updates-for-tests-da749204ba
• paskal/remove-deprecated-func

Build # 11429532004

Build Type

Pull #1825

github

Committed by paskal

Commit Message

Fix CSP img-src directive to allow everything without proxy

Change the default img-src value to "*" and sets it to "'self'" when
image proxy is enabled. The previous state was inversion of this logic
which was wrong.

Pull Request Pull Request #1825: Fix CSP img-src directive to allow everything without proxy

Run Details

2 of 2 new or added lines in 1 file covered. (100.0%)

5989 of 7052 relevant lines covered (84.93%)

33.35 hits per line