textpattern documentations pages are missing CSS stylesheet on Chrome

THE BLUE DRAGON · 2022-09-10 21:28:35

Hi, the documentations pages are missing CSS stylesheets on Google Chrome due to SSL and subdomains and all that, please check:
https://docs.textpattern.com/

It works fine on Firefox, but not on Google Chrome and not on Microsoft Edge, so I guess it has something to do with Chromium-based browsers.

Here are the console log errors:

docs.textpattern.com/:9 Refused to load the stylesheet ‘https://textpattern.com/assets/css/screen.css’ because it violates the following Content Security Policy directive: “style-src-elem ‘self’ ‘unsafe-inline’”.

docs.textpattern.com/:10 Refused to load the stylesheet ‘https://textpattern.com/assets/css/print.css’ because it violates the following Content Security Policy directive: “style-src-elem ‘self’ ‘unsafe-inline’”.

bici · 2022-09-10 23:27:58

verified that the issue does exist with google chrome on mac os.. BUT not with Safari,

phiw13 · 2022-09-11 00:47:55

That is new since Chromium 105, right ?

Last time I checked, when this issue was solved, it worked fine. I think chromium was at version 104 back then. And it still works fine in Safari15.latest and Firefox 104.

Based on the description on MDN , might want to change style-src-elem to

style-src-elem  https://textpattern.com 'self' 'unsafe-inline';

THE BLUE DRAGON · 2022-09-12 10:03:15

phiw13 wrote #333880:

That is new since Chromium 105, right ?

Yes it seems to be new on v. 105

gaekwad · 2022-09-12 13:32:54

Thanks for the report, I’ll take a look.

gaekwad · 2022-09-12 13:40:45

OK, I think we’re fixed up – please test and report back if it’s still a mess. Thank you.

phiw13 · 2022-09-13 01:02:13

THE BLUE DRAGON wrote #333882:

Yes it seems to be new on v. 105

Thanks for confirming that is something “new”. I am in doubt: is that a Chromium bug, or is that a stricter implementation of the spec? Or/and, has the spec recently been updated?

Safari 15/16 and Firefox 105beta (appears to support this) do not seem to follow what Chromium currently does. That said, both may not have a full-fledged implementation of style-src-elem, yet.

gaekwad wrote #333884:

OK, I think we’re fixed up – please test and report back if it’s still a mess. Thank you.

Yes that works fine now – across browsers.

THE BLUE DRAGON · 2022-09-13 23:18:45

gaekwad wrote #333884:

OK, I think we’re fixed up – please test and report back if it’s still a mess. Thank you.

Thank you, yes it seems to work good now 👍🙏

phiw13 · 2022-09-14 02:10:24

phiw13 wrote #333889:

Thanks for confirming that is something “new”. I am in doubt: is that a Chromium bug, or is that a stricter implementation of the spec? Or/and, has the spec recently been updated?

Firefox 105beta

Follow up on that: while Firefox 105 in beta appeared to support style-src-elem, once it move out of beta and into release candidate it flags it as unsupported.

Textpattern CMS

Textpattern CMS support forum

#1 2022-09-10 21:28:35