Hi everyone,
Until 1 or 2 months ago, my website was displaying some pictures which I had uploaded and shared with uplink well, see here:
This is not the case any longer. Could you explain why?
E.g., the path of the 1st picture is https://link.storjshare.io/raw/jvxtyjvzbq4imr7vlfz55last6jq/web/storj-nextcloud/screenshot%2001.png. It is possible to download the picture but it does not display on the website.
Thanks in advance for your help!
If you load your page in chrome and open Developer tools the Issues tabs explains why the images are being blocked and shows recommend fixes.
Content Security Policy of your site blocks some resources
Some resources are blocked because their origin is not listed in your site’s Content Security Policy (CSP). Your site’s CSP is allowlist-based, so resources must be listed in the allowlist in order to be accessed.
A site’s Content Security Policy is set either as via an HTTP header (recommended), or via a meta HTML tag.
To fix this issue do one of the following:
- (Recommended) If you’re using an allowlist for
'script-src', consider switching from an allowlist CSP to a strict CSP, because strict CSPs are more robust against XSS . See how to set a strict CSP .- Or carefully check that all of the blocked resources are trustworthy; if they are, include their sources in the CSP of your site.
Never add a source you don’t trust to your site’s CSP. If you don’t trust the source, consider hosting resources on your own site instead.
AFFECTED RESOURCES
6 directives
| Resource | Status | Directive | Source Location |
|---|---|---|---|
| https://link.storjshare.io/raw/jvxtyjvzbq4imr7vlfz55last6jq/web/storj-nextcloud/screenshot%2001.png | blocked | img-src | storj-et-nextcloud:75 |
| https://link.storjshare.io/raw/jwlsmylf6egpztkdzsc3itc3uepq/web/storj-nextcloud/screenshot%2003.png | blocked | img-src | storj-et-nextcloud:75 |
| https://link.storjshare.io/raw/jw5evfhxbddmslocnocm3nejuqlq/web/storj-nextcloud/screenshot%2004.png | blocked | img-src | storj-et-nextcloud:75 |
| https://link.storjshare.io/raw/jvm3iup5cxx2zfcj27keoipa362a/web/storj-nextcloud/screenshot%2005.png | blocked | img-src | storj-et-nextcloud:75 |
| https://link.storjshare.io/raw/jujmyg5ds6ebo4nhmskvtgi5ko6q/web/storj-nextcloud/screenshot%2006.png | blocked | img-src | storj-et-nextcloud:111 |
| https://environemenz.disqus.com/embed.js | blocked | script-src-elem | storj-et-nextcloud:109 |
