989085 - CSP is blocking the newrelic content

Status: VERIFIED FIXED

(Marketplace Graveyard :: Consumer Pages, defect)

Description

[krupa raj[:krupa]]

I see this:

"Content Security Policy: The page's settings blocked the loading of a resource at https://beacon-3.newrelic.com/1/4a1733c9c6?a=2786954&ap=45&be=1901&fe=10669&dc=2357&v=361.0398870&to=M1ZRYEEADRBRAkAPWwocdUFdAhcKXw8bC18QHVBbXgwMDUANVQVRSkVaUUQSWQBfDFkJWhRfUldW&f=%5B%22xhr%22,%22err%22%5D&perf=%7B%22timing%22:%7B%22of%22:1395957051265,%22n%22:0,%22dl%22:348,%22di%22:2453,%22ds%22:4256,%22de%22:4437,%22dc%22:12569,%22l%22:12569,%22le%22:12583,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22ce%22:0,%22rq%22:0,%22rp%22:0,%22rpe%22:0%7D,%22navigation%22:%7B%7D%7D ("img-src https://marketplace-dev.allizom.org:443 http://dev2.addons.phx1.mozilla.com:80 https://ssl.google-analytics.com:443 https://www.google-analytics.com:443 data://*:* https://marketplace-dev-cdn.allizom.org:443")."]

Comment 1

[krupa raj[:krupa]]

[JavaScript Warning: "Content Security Policy: The page's settings blocked the loading of a resource at https://jserror.newrelic.com/jserrors/1/4a1733c9c6?a=2786954&pl=1395957053165&v=361.0398870&to=M1ZRYEEADRBRAkAPWwocdUFdAhcKXw8bC18QHVBbXgwMDUANVQVRSkVaUUQSWQBfDFkJWhRfUldW&xhr=%5B%7B%22params%22:%7B%22method%22:%22GET%22,%22host%22:%22marketplace-dev.allizom.org:443%22,%22pathname%22:%22/api/v1/fireplace/search/featured/%22,%22status%22:200,%22cat%22:%22PxQEUFNRAAETVlZaAQgCUkYdFGQHBDcQUQxLA1tMXV1dSn8UXwJHCwtYGAwNFxZVWRYEEltQVANKUEZaWCAGA0QXSgdca1FTQQZRN1gEREBIBhtRSFUMAgdTVlIECQJRUAMHC1VTT08BThoAWwgHBQIEWlAEUwBTVFVSQ0oFWV9DATw%3D%22%7D,%22metrics%22:%7B%22count%22:1,%22duration%22:%7B%22t%22:1238%7D,%22rxSize%22:%7B%22t%22:81075%7D,%22cbTime%22:%7B%22t%22:169%7D%7D%7D%5D ("img-src https://marketplace-dev.allizom.org:443 http://dev2.addons.phx1.mozilla.com:80 https://ssl.google-analytics.com:443 https://www.google-analytics.com:443 data://*:* https://marketplace-dev-cdn.allizom.org:443")."]

Comment 2

[Wil Clouser [:clouserw]]

https://github.com/mozilla/zamboni/commit/0c41b9403029ebebb9f3d1a4b2be42eeceeddd02

Comment 3

[Victor Carciu]

Krupa, can you verify this one? I am not sure where you saw this.

Comment 4

[krupa raj[:krupa]]

I still see these happening on stage

Content Security Policy: The page's settings blocked the loading of a resource at https://marketplace-cdn.allizom.org/api/v1/rocketfuel/collections/381/image.png?e5c80b2-533612de ("img-src https://marketplace.allizom.org:443 http://web20.stage.addons.phx1.mozilla.com:80 https://ssl.google-analytics.com:443 https://www.google-analytics.com:443 https://*.newrelic.com:443 data://*:* https://marketplace-stage.cdn.mozilla.net:443").

Content Security Policy: The page's settings blocked the loading of a resource at https://marketplace-stage.cdn.mozilla.net/api/v1/fireplace/search/featured/?cache=1&cat=business&lang=en-US&region=restofworld&vary=0 ("default-src https://marketplace.allizom.org:443").

Comment 5

[Wil Clouser [:clouserw]]

Those are actually unrelated.  I filed bug 990246

Comment 6

[krupa raj[:krupa]]

verified fixed