Bug 11650 - url filter blockpage backround won't show
Summary: url filter blockpage backround won't show
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: all All
: Will affect an average number of users Aesthetic Issue
Assignee: Peter Müller
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-02-27 22:05 UTC by Arne.F
Modified: 2018-10-15 13:54 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arne.F 2018-02-27 22:05:55 UTC
The background image will not displayed because content security policy will block loading images from ipfire.

the image should whitelisted or embedded into the blockpage.
Comment 1 Peter Müller 2018-03-01 20:09:39 UTC
(In reply to Arne Fitzenreiter from comment #0)
> The background image will not displayed because content security policy will
> block loading images from ipfire.
Correctly, I have not thought about that.
> 
> the image should whitelisted or embedded into the blockpage.
Whitelisting is probably difficult since we don't know the IPFire's address or domain name. Embedding the image into the page itself might be an option, but I think this is tricky with larger images (embedded PNG data?).

Is disabling Content-Security-Policy on port 81 an option? Are there any other services than the squid's error pages?
Comment 2 Michael Tremer 2018-03-01 21:23:24 UTC
Update accellerator is running on the same port and delivering basically
untrusted content. So I would say embedding is the best option.

CSS allows to embed pretty much anything when it is encoded in base64.

It isn't too great of a solution since we have to deliver the image every time
and it will never be cached locally. But security comes first and we are serving
this in a local network most of the time which should have the bandwidth.
Comment 3 Peter Müller 2018-04-30 19:35:47 UTC
Okay. Currently, I do not know much about embedding in CSS yet, but I'll have a look.
Comment 4 Peter Müller 2018-06-16 20:52:13 UTC
https://patchwork.ipfire.org/patch/1805/
Comment 5 Peter Müller 2018-06-30 09:57:41 UTC
Sent in second patch: https://patchwork.ipfire.org/patch/1846/
Comment 6 Peter Müller 2018-08-26 21:17:33 UTC
Sent in third patch (which actually works!): https://patchwork.ipfire.org/patch/1903/