vikunja/vikunja
5
48
Fork 86
Code Issues 134 Pull Requests 35 Packages Releases 37 Activity

Image from reminder emails does not load #898

New Issue
Closed
opened 2021-06-24 23:51:02 +00:00 by SteveDinn · 5 comments
SteveDinn commented 2021-06-24 23:51:02 +00:00
Copy Link

When I view the reminder emails in Gmail, the logo image does not load. I'm not sure what's causing this, because I can see the URL for the image in the email, and when extracted, the image loads properly in a browser.

When I view the reminder emails in Gmail, the logo image does not load. I'm not sure what's causing this, because I can see the URL for the image in the email, and when extracted, the image loads properly in a browser.
Screenshot_20210624-204359~2.png
16 KiB
Screenshot_20210624-204359~2.png
konrad commented 2021-06-25 10:14:25 +00:00
Owner
Copy Link

Maybe your browser or email software blocks images from third party domains? Maybe you configured CORS headers for your Vikunja instance?

Maybe the browser console has more details.

Maybe your browser or email software blocks images from third party domains? Maybe you configured CORS headers for your Vikunja instance? Maybe the browser console has more details.
SteveDinn commented 2021-06-25 12:15:49 +00:00
Author
Copy Link

My email software is Chrome-Stable + Gmail.

I do have some security-related headers in my reverse proxy configuration that might be involved here. I'm not a web guy though...I copied these off StackExchange :)

  Strict-Transport-Security max-age=31536000;includeSubDomains
  Content-Security-Policy "script-src 'self'"
  Content-Security-Policy "default-srv https:"
  X-Frame-Options SAMEORIGIN
  X-Content-Type-Options nosniff
  Referrer-Policy same-origin
My email software is Chrome-Stable + Gmail. I do have some security-related headers in my reverse proxy configuration that might be involved here. I'm not a web guy though...I copied these off StackExchange :) ``` Strict-Transport-Security max-age=31536000;includeSubDomains Content-Security-Policy "script-src 'self'" Content-Security-Policy "default-srv https:" X-Frame-Options SAMEORIGIN X-Content-Type-Options nosniff Referrer-Policy same-origin ```
konrad commented 2021-06-25 15:22:25 +00:00
Owner
Copy Link

If the browser blocks loading the image there should be something in the browser console about that. Could you check? (ctrl + shift + I and then "Console")
The Content-Security-Policy "default-srv https:" could be the issue here.

If the browser blocks loading the image there should be something in the browser console about that. Could you check? (`ctrl + shift + I` and then "Console") The `Content-Security-Policy "default-srv https:"` could be the issue here.
konrad added the
kind/bug
needs reproduction
 labels 2021-07-07 11:54:25 +00:00
konrad commented 2021-07-28 19:09:37 +00:00
Owner
Copy Link

I'm closing this due to inactivity. If it is still relevant and reproducable with the latest unstable version, please feel free to reopen with steps to reproduce.

I'm closing this due to inactivity. If it is still relevant and reproducable with the latest unstable version, please feel free to reopen with steps to reproduce.
SteveDinn commented 2021-07-28 22:40:44 +00:00
Author
Copy Link

It's still happening, but i don't know how to go about figuring out whether its Vikunja (I'm doubting this now) or Gmail, or my browser or my reverse proxy doing something weird. I can't tell.

It's still happening, but i don't know how to go about figuring out whether its Vikunja (I'm doubting this now) or Gmail, or my browser or my reverse proxy doing something weird. I can't tell.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
dependencies
duplicate
This issue or pull request already exists
help wanted
Need some help
invalid
Something is wrong
kind/bug
Something is not working
kind/feature
New feature
needs reproduction
question
More information is needed
security
wontfix
This won't be fixed
No Label
kind/bug
needs reproduction
Milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vikunja/vikunja#898
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?