Kevin Wallace 9db7bdf0fb remote follow: use HTML redirect to work around CSP issue ...

In Chrome, I get the following when trying to use the remote follow form:

    Refused to send form data to 'https://example.com/remote_follow'
    because it violates the following Content Security Policy directive:
    "form-action 'self'".

It seems some browsers (but notably not Firefox) apply the form-action
policy to the redirect target in addition to the initial form
submission endpoint.  See:

    https://github.com/w3c/webappsec-csp/issues/8

In that thread, this workaround is suggested.

2022-11-13 17:11:02 +01:00

..

scss

Revert "Minor styling tweaks: piccalil.li's modern CSS Reset swyx.io's 100 Bytes of CSS to look great everywhere"

2022-11-11 15:07:18 +01:00

static

Fix the delete button

2022-08-30 19:09:51 +02:00

templates

Tweak orientation hint for attachments

2022-11-11 14:56:56 +01:00

utils

Fix OG metadata scraping and improve workers

2022-11-13 13:00:22 +01:00

__init__.py

Initial commit for new v2

2022-06-22 20:11:22 +02:00

activitypub.py

Follow up fixes for the image URL support

2022-11-11 15:13:45 +01:00

actor.py

Fix for profile image URL support

2022-11-12 09:26:28 +01:00

admin.py

Improve Block support

2022-10-23 16:37:32 +02:00

ap_object.py

Tweak orientation hint for attachments

2022-11-11 14:56:56 +01:00

boxes.py

Fix permalink for Questions

2022-11-03 22:38:29 +01:00

config.py

Follow up fixes for the image URL support

2022-11-11 15:13:45 +01:00

customization.py

First shot at supporting custom handler

2022-11-02 08:51:21 +01:00

database.py

Improve debug mode

2022-08-28 11:24:46 +02:00

httpsig.py

More actor refresh improvements

2022-10-09 11:36:00 +02:00

incoming_activities.py

Fix OG metadata scraping and improve workers

2022-11-13 13:00:22 +01:00

indieauth.py

Tweak error wording

2022-09-16 18:37:09 +02:00

key.py

Fix config wizard

2022-07-04 20:25:27 +02:00

ldsig.py

Tweak model for access tokens

2022-07-10 12:06:16 +02:00

lookup.py

Improve Announce handling

2022-09-13 07:59:35 +02:00

main.py

remote follow: use HTML redirect to work around CSP issue

2022-11-13 17:11:02 +01:00

media.py

Fix formatting

2022-11-06 16:57:04 +01:00

micropub.py

Finish Question/poll support

2022-07-24 12:36:59 +02:00

models.py

Tweak orientation hint for attachments

2022-11-11 14:56:56 +01:00

outgoing_activities.py

Improve move support

2022-09-08 20:00:02 +02:00

prune.py

Fix inbox processing for deleted actors

2022-08-19 19:36:23 +02:00

source.py

Improve mention parsing

2022-11-12 10:04:37 +01:00

templates.py

Fix OG image URL

2022-11-09 09:29:25 +01:00

uploads.py

Fix GIF upload handling

2022-09-14 08:38:54 +02:00

webfinger.py

Webfinger strips extra space

2022-11-11 15:25:55 +01:00

webmentions.py

Webmention improvements

2022-07-19 20:38:32 +02:00