https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43832 --- Comment #10 from Frédéric Demians <f.demians@tamil.fr> --- (In reply to Owen Leonard from comment #9)
I don't know if the example is meant to be comprehensive but I found I also need ed these in the script-src section:
https://books.google.com https://openlibrary.org
And these in the img-src section:
It's supposed to be documented in koha-conf.xml, per provider: - GoogleJackets: script-src https://books.google.com img-src https://books.google.com CSP is a clear nuisance. Otherwise, instead of having admins configure CSP permissions for cover providers one by one, we could just as well settle on an exhaustive list of these providers. After all, their URLs should be very, very stable and safe. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.