[ui] Mixed content error in default user avatar request #5146

Closed
opened 2025-11-02 06:15:55 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @Monter on GitHub (Mar 29, 2020).

  • Gitea version (or commit ref): 1.12.0+dev-60-g3f0cb8b33
  • Operating system: Debian x64
  • Database (use [x]):
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • No

Description

When CSP is enabled on the server and everything works after HTTPS, the default user icon in the Activity tab does not appear. To make them visible you need to add to the CSP the img-src exception: http://gitea_domain which proves that the request for gitea_domain/user/avatar/Ghost/-1 occurs by HTTP

Originally created by @Monter on GitHub (Mar 29, 2020). - Gitea version (or commit ref): 1.12.0+dev-60-g3f0cb8b33 - Operating system: Debian x64 - Database (use `[x]`): - [x] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] No ## Description When CSP is enabled on the server and everything works after HTTPS, the default user icon in the Activity tab does not appear. To make them visible you need to add to the CSP the img-src exception: http://gitea_domain which proves that the request for gitea_domain/user/avatar/Ghost/-1 occurs by HTTP
Author
Owner

@Monter commented on GitHub (Mar 29, 2020):

Sorry, my mistake - I had HTTP set in ROOT_URL ...

@Monter commented on GitHub (Mar 29, 2020): Sorry, my mistake - I had HTTP set in ROOT_URL ...
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#5146