Hi I’d like to do some testing of Discourse without necessarily going through its configured public domain name. For eg if Discourse have been installed and configured as https://uat.mysite.com then I can obviously load my browser and browse to https://uat.mysite.com , which means my browser would …

[图片] titusc: which means my browser would exit my internal network out to public Internet to resolve the domain name to it’s public IP address, and load the pages via its public IP address. Then configure your machine to resolve that address to the local ip of the discourse server. There are …

I actually tried /etc/hosts but still having the same error due to CSP. I’d have thought that there is a flag or setting that can be used to toggle this to enable the developers to do everything within their laptop without having to stand up a DNS solution. Looking at the Install Discourse on macO…

[图片] titusc: is there a way to either disable CSP There is a site setting named content security policy. You can uncheck and save to disable CSP. As long as this is not done in production instance it’s okay.

[图片] titusc: The challenge I have is I have automation to install Discourse and want to use the same process to stand up both development, UAT, and production environments That’s not a good idea. It will never work. A development environment is necessity different as it has assets precompiled…

[图片] titusc: I’d like to do some testing of Discourse without necessarily going through its configured public domain name. Hi! I regularly do this, but with Docker installs. Assuming that you use our standard Docker installation in production, then for your acceptance testing you should be us…

如何放宽内容安全策略

开发

pfaffman (Jay Pfaffman) 2022 年11 月 5 日 08:26 2

然后配置您的计算机，将该地址解析为 discourse 服务器的本地 IP。有很多方法可以做到这一点，但它们依赖于操作系统，因此您应该在 Google 搜索中包含操作系统。（在 Linux 中，我认为 Mac 也是如此，您可以直接编辑 /etc/hosts。）

话题		回复	浏览量
Content Security Policy: The settings of the page have blocked the loading of a resource ("script-src") Self-hosting unsupported-install	27	2497	2023 年5 月 3 日
Fresh Discourse install on digitalocean, cannot activate account Self-hosting	14	1693	2019 年1 月 21 日
Port forwarding? Support	2	917	2020 年1 月 30 日
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25693	2023 年6 月 13 日
Local installation internal use only Self-hosting	11	1247	2024 年3 月 9 日

如何放宽内容安全策略

相关话题