Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Re: theme's link
It says Firefox Quantum 63.0.3 (64-Bit). I now get an additional warning in red (with a “2” indicating twice):
Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert (“script-src”).
The other four notices are still there. It’s not crucial by any means and it works in Chrome and Safari just fine. Just wondered.
EDIT: I think that’s “The page’s settings blocked the loading of a resource at self.” in English
TXP Builders – finely-crafted code, design and txp
Offline
Re: theme's link
Hi Pete, I just tested them on FF Quantum 63.0.3, Safari 12.0.1, Chrome 70.0.3538.110 and Opera 56.0.3051.116.
All looks just fine from here.
Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.
Offline
Re: theme's link
colak wrote #315445:
Hi Pete, I just tested them on FF Quantum 63.0.3 … All looks just fine from here.
Weird: Does it really show you the menu items, the forum titles and forum topic headings in PT Serif in Firefox? They, of course, show for me, just not in the same font as the other browsers.
I’d hate to have wasted Pete’s time on something that only happens for me…
TXP Builders – finely-crafted code, design and txp
Offline
Re: theme's link
Just chiming in. Now you’ve tinkered with the policy I’m seeing this in Firefox and Chrome:
Access to font at ‘https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-regular.woff2’ from origin ‘https://forum.textpattern.com’ has been blocked by CORS policy: The ‘Access-Control-Allow-Origin’ header contains multiple values ‘https://textpattern.com https://www.textpattern.com https://forum.textpattern.com’, but only one is allowed.
for 4 fonts.
But Safari doesn’t complain. Go figure.
The smd plugin menagerie — for when you need one more gribble of power from Textpattern. Bleeding-edge code available on GitHub.
Txp Builders – finely-crafted code, design and Txp
Offline
Re: theme's link
Bloke, colak, jakob: please try now. Thank you for the reports.
Offline
Re: theme's link
Firefox:
downloadable font: download timed out (font-family: “PT Serif” style:normal weight:700 stretch:100 src index:1): bad URI or cross-site access not allowed source: https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-700.woff unknown:1:731
Chrome:
Access to font at ‘https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-regular.woff’ from origin ‘https://forum.textpattern.com’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.
The smd plugin menagerie — for when you need one more gribble of power from Textpattern. Bleeding-edge code available on GitHub.
Txp Builders – finely-crafted code, design and Txp
Offline
Re: theme's link
OK, need to think on this. Some browsers permit multiple entries in Access-Control-Allow-Origin, some don’t. Leave it with me.
Offline
Re: theme's link
here too: Firefox still not showing the correct fonts and showing the notices in the console. Chrome gives me the notices too (I am running a dev version of that) but the fonts do display.
TXP Builders – finely-crafted code, design and txp
Offline
Re: theme's link
OK… I see what you are looking at:)
This is in FF
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-regular.woff2. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://textpattern.com, https://forum.textpattern.com’).[Learn More]
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-700.woff2. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://textpattern.com, https://forum.textpattern.com’).[Learn More]
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-regular.woff. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://textpattern.com, https://forum.textpattern.com’).[Learn More]
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://textpattern.com/assets/fonts/pt-serif-v9-latin-ext-700.woff. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://textpattern.com, https://forum.textpattern.com’).[Learn More]
All the [Learn More] links lead to developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSAllowOriginNotMatchingOrigin
Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.
Offline
Re: theme's link
Current plan is to migrate the forum next week – this will mitigate pretty much all of the CORS stuff (the design of which is pretty strange, having read more today), so please enjoy your Georgia goodness for a few more days.
Thanks again for the reports.
Offline
Re: theme's link
I guess that the forum migration has started?
I get a 404 on https://forum.textpattern.com/search.php?action=show_new. the root of the site redirects to the .io domain of the forum.
Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.
Offline
Re: theme's link
colak wrote #315463:
I guess that the forum migration has started?
I get a 404 on https://forum.textpattern.com/search.php?action=show_new. the root of the site redirects to the .io domain of the forum.
I’ve started some prep work – I will fix that now.
Edit: fixed. Thanks for the report! Late night error on my part, sorry about that.
Last edited by gaekwad (2018-11-30 17:25:24)
Offline