From: Juliusz Chroboczek <jch@irif.fr>
To: "Michael Ströder" <michael@stroeder.com>
Cc: galene@lists.galene.org
Subject: [Galene] Re: "This operation is insecure"
Date: Wed, 27 Jan 2021 21:05:58 +0100 [thread overview]
Message-ID: <87pn1q9mc9.wl-jch@irif.fr> (raw)
In-Reply-To: <2fdb1db7-27f7-c23d-f2ca-11b9c59db125@stroeder.com>
>> 9d9db1a92060a3e0ce15021234b8561a3e6bfc49 some users now get a red
>> message which says "This operation is insecure" when trying to enter a
>> group.
>> Does that ring a bell?
> Probably the affected users are using the Safari browser.
It looks like some versions of Mobile Safari don't like our
Content-Security-Policy header. It would be good to know what operation
exactly is disliked by Mobile Safari, and relax the CSP header to match.
This happens in the "mungeHeader" function in webserver.go.
-- Juliusz
next prev parent reply other threads:[~2021-01-27 20:06 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-01-27 18:24 [Galene] " Michael Ströder
2021-01-27 18:52 ` [Galene] " Michael Ströder
2021-01-27 20:05 ` Juliusz Chroboczek [this message]
2021-01-27 20:08 ` Juliusz Chroboczek
2021-01-27 20:17 ` Michael Ströder
2021-01-27 20:30 ` Juliusz Chroboczek
2021-01-27 21:09 ` Michael Ströder
2021-01-27 21:12 ` Michael Ströder
2021-01-27 21:42 ` Juliusz Chroboczek
2021-01-27 22:15 ` Michael Ströder
2021-01-28 13:11 ` Michael Ströder
2021-01-28 16:16 ` Michael Ströder
2021-02-01 0:45 ` Juliusz Chroboczek
2021-02-01 9:10 ` Michael Ströder
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://lists.galene.org/postorius/lists/galene.lists.galene.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87pn1q9mc9.wl-jch@irif.fr \
--to=jch@irif.fr \
--cc=galene@lists.galene.org \
--cc=michael@stroeder.com \
--subject='[Galene] Re: "This operation is insecure"' \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox