New issue
Advanced search Search tips

Issue 881830 link

Starred by 1 user
Status: Assigned
Owner:
kjlubick@chromium.org
Cc:
mar...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

Cannot open Recipe due to CSP errors

Project Member Reported by ekaramad@chromium.org, Sep 7 
Trying to load:
https://chromium-swarm.appspot.com/task?id=3fc7ffbb94e56a10&refresh=10

And then clicking on "Recipe: chromium" I end up with CSP error:
Refused to frame 'https://cs.chromium.org/' because it violates the following Content Security Policy directive: "frame-src https://accounts.google.com https://luci-milo.appspot.com/swarming/task/ https://ci.chromium.org/raw/build/ https://logs.chromium.org/".

Probing the headers of the link target which is:
https://cs.chromium.org/search/?q=file:recipes/chromium.py

I see x-frame-options: sameorigin. I wonder if this is the issue.

Comment 1 by kjlubick@google.com, Sep 7 

Short-term (possibly long-term) workaround - right click link and open in a new tab.

I don't have the decision making power of whether or not to add cs.chromium.org to the CSP whitelist.

Comment 2 by mar...@chromium.org, Sep 10 

I don't know if there's a way to make all links in a frame to become popup links? I agree that's a real UX problem but I don't know enough how to fix this in a generic way.

Comment 3 by kjlubick@google.com, Sep 24 

I cannot tell an iframe "open all links in a new tab" w/o changing the code that's being framed.

We'd need to have cs.chromium.org d something like https://stackoverflow.com/a/2656798
►

Sign in to add a comment