1182476 - Rendering issues in logo, spinner on Voluum

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Saurabh Anand [:sawrubh]]

STR:

* Go to https://voluum.com, click on 'Demo Account', on the next page click on 'Log In to demo'.

What happens:
* In that demo account, the Voluum logo is missing on the top left hand box, above 'Dashboard'.

* Additionally when you click on any of the menu options like 'Campaigns' or 'Country', a 'Loading...' dialog comes up which is supposed to have a spinner which is again not shown.

Both of these things work perfectly well in Chrome and Firefox stable but not in Nightly.

Comment 1

[u279076]

(In reply to Saurabh Anand [:sawrubh] from comment #0)
> Both of these things work perfectly well in Chrome and Firefox stable but
> not in Nightly.

I can reproduce this in Windows 10 - does not reproduce in Firefox 39.0a1 from March 1 but does in today's Nightly. I'll see if I can find the regression window.

Comment 2

[u279076]

mozilla-central:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=4fe763cbe196&tochange=ab0490972e1e

mozilla-inbound:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=2e0ebba4a766&tochange=183190289b9c

Looks like this is either bug 1133189 or bug 1086999, both of which Christoph Kerschbaumer worked on. Any ideas, Christoph?

Comment 3

[Christoph Kerschbaumer [:ckerschb]]

(In reply to Anthony Hughes, QA Mentor (:ashughes) from comment #2)
> Looks like this is either bug 1133189 or bug 1086999, both of which
> Christoph Kerschbaumer worked on. Any ideas, Christoph?

The site-compat issue described in comment 0 is caused by Bug 1086999. According to the CSP spec [1], the single  asterisk (*) should not match data:, blob:, and filesystem:. The page https://voluum.com/ uses a CSP including:
> img-src *
which then triggers the error when loading a data: scheme, see error in the browser console:
> Content Security Policy: The page's settings blocked the loading of a resource at data:image/png;base64

In order to fix the problem the page https://voluum.com/ would have to update their CSP for images to:
> img-src * data:;

Saurabh, since you filed the bug, are you in any contact with https://voluum.com/ and could let them know how to resolve the problem?

[1] http://www.w3.org/TR/CSP11/#match-source-expression

Comment 4

[u279076]

Moving this to Tech Evangelism based on comment 3.

Comment 5

[Hallvord R. M. Steen [:hallvors]]

Saurab, when you've contacted them please change [contactready] to [sitewait] in the whiteboard field, or ask me to do so.

Comment 6

[Michal Rumanek]

Thank you contacting us. We've just updated our CSP rules for images on Voluum Panel. Please update status of the bug.

Comment 7

[u279076]

Thanks for the quick turnaround, Michal. I've checked in the latest Firefox Nightly and it looks to be fixed. Thank you as well to Saurabh for reporting this issue.