1860458 - SVG is rendered correctly in <img> but incorrectly in new tab

Status: RESOLVED INVALID

(Core :: SVG, defect)

Description

[giul.mus]

Attachment: network-fabric.drawio.svg

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0

Steps to reproduce:

1. Open https://github.com/liqotech/liqo/blob/6931d5310205e2fb6c6d7f2d56feab1588dd351f/docs/_static/images/features/network-fabric/network-fabric.drawio.svg, which contains a svg file in an <img> (the file is also attached to this bug for future reproducibility)
2. Open the raw file in a new tab

Actual results:

The preview shows the file correctly: twelve blue shapes grouped into two white rectangles, connected by arrows.
The image in the new tab only shows the rectangles and the arrows, but not the blue shapes.

Expected results:

The image in <img> and the image in the new tab have the same content.

Comment 1

[BugBot [:suhaib / :marco]]

The Bugbug bot thinks this bug should belong to the 'Core::SVG' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Timothy Nikkel (:tnikkel)]

I observe the same behaviour (both in the good and bad cases) in both Safari and Chrome.

Comment 3

[Alice0775 White]

Error in console:

downloadable font: failed to start download (font-family: "Lato" style:normal weight:400 stretch:100 src index:0): content blocked source: https://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/svg+xml;base64,PHN2ZyB4bWxucz… (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at https://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at https://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjxAwXjeu.woff2 (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at https://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 (“default-src”). network-fabric.drawio.svg
Content-Security-Policy: The page’s settings blocked the loading of a resource at https://raw.githubusercontent.com/favicon.ico (“default-src”). FaviconLoader.sys.mjs:176:19

Regression window(Open https://raw.githubusercontent.com/liqotech/liqo/6931d5310205e2fb6c6d7f2d56feab1588dd351f/docs/_static/images/features/network-fabric/network-fabric.drawio.svg):
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=5e2692f8a367cdd899d4a4653a5372d7123a1ec6&tochange=b07db5d650b7056c78ba0dbc409d060ec4e922cd

Comment 4

[Robert Longson [:longsonr]]

The server's CSP settings are blocking the images.