Re: [Cloud] Need help with selectize.js

Unless something has changed, Wmflabs policy requires that we only use Wikimedia CDNs. Other CDNs use cookies to track a user's actions, which violates the privacy policy. Magog On Wed, Jun 24, 2020 at 3:41 PM Roy Smith wrote: > OK, I got this solved. Turns out I had a bug in my django templat

Re: [Cloud] Need help with selectize.js

OK, I got this solved. Turns out I had a bug in my django template inheritance, which was causing selectize to load before jquery. In an odd sort of way, the issue with the Content Security Policy violations turned out to be important. I knew it was a problem, but blew off doing anything abou

Re: [Cloud] Need help with selectize.js

Honestly, I don't see any downsides to just keeping the attributes. Integrity validation is a valid defense and if it's blocked for some reason that should be fixed on our side. YiFei Zhu On Wed, Jun 24, 2020, 10:11 MusikAnimal wrote: > I wouldn't think you'd need any additional attributes. Jus

Re: [Cloud] Need help with selectize.js

On Wed, Jun 24, 2020 at 8:15 AM Roy Smith wrote: > > Oh, this is unexpected. When I do the change diffed below, I get: > > Subresource Integrity: The resource > 'https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css' > has an integrity attribute, but the

Re: [Cloud] Need help with selectize.js

I wouldn't think you'd need any additional attributes. Just something like: https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css "> This is how I do it in my tools. ~ MA On Wed, Jun 24, 2020 at 10:15 AM Roy Smith wrote: > Oh, this is unexpected. When

Re: [Cloud] Need help with selectize.js

Oh, this is unexpected. When I do the change diffed below, I get: > Subresource Integrity: The resource > 'https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css' > has an integrity attribute, but the resource requires the request to be CORS > enabled to

Re: [Cloud] Need help with selectize.js

Thank you for reminding me that fixing this has been on my list for a while. My CSP-fu is weak. As I understand it, all I need do is: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"; - integrity="sha384-ggOyR0iXCbM

Re: [Cloud] Need help with selectize.js

> most if not all of the CSS and Javascript didn't load because of cross site scripting failures The Content Security Policy violations are report-only, if that's what you're referring to. Popper, Bootstrap, jQuery and Selectize are all available via https://cdnjs.toolforge.org/ which will get aro

Re: [Cloud] Need help with selectize.js

Hi, I clicked on the link, but most if not all of the CSS and Javascript didn't load because of cross site scripting failures. Maybe you should start there? Cheers, -Travis On Mon, Jun 22, 2020 at 7:01 PM Roy Smith wrote: > I'm mostly a python guy, who only dabbles in javascript when I can't a