zaklaus
/
microblog
1
0
Fork 0
Code Issues Pull Requests Releases Activity
microblog/app
History
Kevin Wallace 9db7bdf0fb remote follow: use HTML redirect to work around CSP issue 
In Chrome, I get the following when trying to use the remote follow form:

    Refused to send form data to 'https://example.com/remote_follow'
    because it violates the following Content Security Policy directive:
    "form-action 'self'".

It seems some browsers (but notably not Firefox) apply the form-action
policy to the redirect target in addition to the initial form
submission endpoint.  See:

    https://github.com/w3c/webappsec-csp/issues/8

In that thread, this workaround is suggested.
 		2022-11-13 17:11:02 +01:00
..
scss Revert "Minor styling tweaks: piccalil.li's modern CSS Reset swyx.io's 100 Bytes of CSS to look great everywhere" 2022-11-11 15:07:18 +01:00
static Fix the delete button 2022-08-30 19:09:51 +02:00
templates Tweak orientation hint for attachments 2022-11-11 14:56:56 +01:00
utils Fix OG metadata scraping and improve workers 2022-11-13 13:00:22 +01:00
__init__.py Initial commit for new v2 2022-06-22 20:11:22 +02:00
activitypub.py Follow up fixes for the image URL support 2022-11-11 15:13:45 +01:00
actor.py Fix for profile image URL support 2022-11-12 09:26:28 +01:00
admin.py Improve Block support 2022-10-23 16:37:32 +02:00
ap_object.py Tweak orientation hint for attachments 2022-11-11 14:56:56 +01:00
boxes.py Fix permalink for Questions 2022-11-03 22:38:29 +01:00
config.py Follow up fixes for the image URL support 2022-11-11 15:13:45 +01:00
customization.py First shot at supporting custom handler 2022-11-02 08:51:21 +01:00
database.py Improve debug mode 2022-08-28 11:24:46 +02:00
httpsig.py More actor refresh improvements 2022-10-09 11:36:00 +02:00
incoming_activities.py Fix OG metadata scraping and improve workers 2022-11-13 13:00:22 +01:00
indieauth.py Tweak error wording 2022-09-16 18:37:09 +02:00
key.py Fix config wizard 2022-07-04 20:25:27 +02:00
ldsig.py Tweak model for access tokens 2022-07-10 12:06:16 +02:00
lookup.py Improve Announce handling 2022-09-13 07:59:35 +02:00
main.py remote follow: use HTML redirect to work around CSP issue 2022-11-13 17:11:02 +01:00
media.py Fix formatting 2022-11-06 16:57:04 +01:00
micropub.py Finish Question/poll support 2022-07-24 12:36:59 +02:00
models.py Tweak orientation hint for attachments 2022-11-11 14:56:56 +01:00
outgoing_activities.py Improve move support 2022-09-08 20:00:02 +02:00
prune.py Fix inbox processing for deleted actors 2022-08-19 19:36:23 +02:00
source.py Improve mention parsing 2022-11-12 10:04:37 +01:00
templates.py Fix OG image URL 2022-11-09 09:29:25 +01:00
uploads.py Fix GIF upload handling 2022-09-14 08:38:54 +02:00
webfinger.py Webfinger strips extra space 2022-11-11 15:25:55 +01:00
webmentions.py Webmention improvements 2022-07-19 20:38:32 +02:00