hhmx.de

Shoq

Föderation EN Mi 01.01.2025 17:21:48

@andypiper Happy NY! We are still wrestling with this confounding problem. The rationale never felt adequate, and there isn’t a single other website or social media platform that gives our browser extension this problem. It forces us to direct our users to OTHER apps to avoid it, which is nuts. Can you explain why the CSP must be this draconian? Can’t whitelisting solve any issue Mastodon devs uniquely feel is a problem?

github.com/mastodon/mastodon/i

Andy Piper

Föderation EN Do 02.01.2025 17:35:29

@shoq I'm not familiar with that issue (or, only to the extent I just read through the GH threads today) - AFAIUI the CSP behaviour is intentional, albeit I understand frustrating for your extension. I'll have to do a bit more digging next week to understand it.

Shoq

Föderation EN Do 02.01.2025 19:14:58

Thank you, good sir. It’s been perplexing. We know it’s intentional, but it’s so unusual, and prohibitive, there has to be some whitelist or other compromise to be found for bonafide apps. Appreciate the help very much. cc @Green_Footballs