pagure

#4489 Fix the blame page and a bunch of fixes for CSP support
Merged by pingou. Opened by pingou.
blame_fixes  into  master

Download 4489.patch

Fix the blame view so the avatar can show up again while still preventing undue javascript from running.

CSP support means we cannot have style="" in the html nor javascript:void(0), both have been dropped, the tests have been adjusted for this.

pretty please pagure-ci rebuild

pretty please pagure-ci rebuild

1 new commit added

  • Black fixes

pretty please pagure-ci rebuild

pretty please pagure-ci rebuild

rebased onto 335a79f0099675449deb8966c5b063e5ac56c1d5

missing nonce here

rebased onto d156c81a66d1f556fc86d8c9c6794bf5bf2ce5e8

can't find more CSP violations now.

:thumbsup:

is nonce required here?

It's not per say, but it makes it easier to git grep the source and find tags that do not adhere to csp

Thanks for the review! :)

Pull-Request has been merged by pingou
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.