Hi I’d like to do some testing of Discourse without necessarily going through its configured public domain name. For eg if Discourse have been installed and configured as https://uat.mysite.com then I can obviously load my browser and browse to https://uat.mysite.com , which means my browser would …

[image] titusc: which means my browser would exit my internal network out to public Internet to resolve the domain name to it’s public IP address, and load the pages via its public IP address. Then configure your machine to resolve that address to the local ip of the discourse server. There a…

I actually tried /etc/hosts but still having the same error due to CSP. I’d have thought that there is a flag or setting that can be used to toggle this to enable the developers to do everything within their laptop without having to stand up a DNS solution. Looking at the Install Discourse on macO…

[image] titusc: is there a way to either disable CSP There is a site setting named content security policy. You can uncheck and save to disable CSP. As long as this is not done in production instance it’s okay.

[image] titusc: The challenge I have is I have automation to install Discourse and want to use the same process to stand up both development, UAT, and production environments That’s not a good idea. It will never work. A development environment is necessity different as it has assets precompi…

[image] titusc: I’d like to do some testing of Discourse without necessarily going through its configured public domain name. Hi! I regularly do this, but with Docker installs. Assuming that you use our standard Docker installation in production, then for your acceptance testing you should be…

Comment détendre la politique de sécurité du contenu

Dev

Falco (Falco) Novembre 11, 2022, 5:34 4

Il existe un paramètre de site nommé politique de sécurité du contenu. Vous pouvez le décocher et enregistrer pour désactiver CSP.

Tant que cela n’est pas fait dans une instance de production, c’est acceptable.

Sujet		Réponses	Vues
Content Security Policy: The settings of the page have blocked the loading of a resource ("script-src") Self-hosting unsupported-install	27	2495	Mai 3, 2023
Fresh Discourse install on digitalocean, cannot activate account Self-hosting	14	1691	Janvier 21, 2019
Port forwarding? Support	2	917	Janvier 30, 2020
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25691	Juin 13, 2023
Local installation internal use only Self-hosting	11	1247	Mars 9, 2024

Comment détendre la politique de sécurité du contenu

Sujets connexes