[Webkit-unassigned] [Bug 236641] New: Refused to load https://c.clarity.ms/c.gif because it does not appear in the img-src directive of the Content Security Policy.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=236641

            Bug ID: 236641
           Summary: Refused to load https://c.clarity.ms/c.gif because it
                    does not appear in the img-src directive of the
                    Content Security Policy.
           Product: WebKit
           Version: Safari 15
          Hardware: Mac (Intel)
                OS: macOS 12
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: cezary.tomczyk at gmail.com

Hello.

I've got an issue:

Refused to load https://c.clarity.ms/c.gif because it does not appear in the img-src directive of the Content Security Policy.

when I go to https://www.sitelint.com/

CSP configuration for img-src: img-src 'self' data: blob: https://www.clarity.ms https://c.clarity.ms https://secure.gravatar.com;
Safari: Version 15.3 (17612.4.9.1.8)
OS: macOS Monterey, 12.2.1 (21D62)

Other browsers doesn't report that issue. I am not sure if this is specific to Safari, or CSP rule has been set incorrectly.

Best,
Cezary Tomczyk

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220215/c8e0c469/attachment-0001.htm>