Images pasted from Word together with text do not load in manual tests
📝 Provide detailed reproduction steps (if any)
- Open a manual test, e.g. http://localhost:8125/ckeditor5-image/tests/manual/image.html
- Copy an image together with some text from a word document, for example Doc1.docx
- Paste the image together with the text into the manual test
✔️ Expected result
The image and the text get inserted into the editor
❌ Actual result
- In Chrome and Firefox:
Only the text and the alternative text for the image are visible, but the image is not. The console throws an error message.
Security Error: Content at http://localhost:8125/ckeditor5-image/tests/manual/imagesizeattributes.html
may not load or link to file:////Users/UserName/Library/Group%20Containers/UBF8T346G9.Office/TemporaryItems/msohtmlclip/clip_image001.jpg.
- In Safari:
Only the text is visible, the alternative text and the image are not. The console throws error messages.
[Error] Refused to connect to blob:http://localhost:8125/0a85a43c-4fc0-481e-ae84-77f37d745019 because it does not appear in the connect-src directive of the Content Security Policy.
[Error] Refused to load blob:http://localhost:8125/0a85a43c-4fc0-481e-ae84-77f37d745019 because it does not appear in the img-src directive of the Content Security Policy.
📃 Other details
It is possibly an issue with manual tests as it doesn't occur in docs
- Browser: cross-browser
- OS: MacOS
If you'd like to see this fixed sooner, add a 👍 reaction to this post.
There has been no activity on this issue for the past year. We've marked it as stale and will close it in 30 days. We understand it may still be relevant, so if you're interested in the solution, leave a comment or reaction under this issue.
We've closed your issue due to inactivity. We understand that the issue may still be relevant. If so, feel free to open a new one (and link this issue to it).
Reopening as it still occurs and affects other manual tests - e.g. in pastefromofficeenhanced.html, there are a lot of cors errors in the console:
Refused to connect to '<URL>' because it violates the following Content Security Policy directive: "connect-src 'self' <URL> <URL>".
pastefromofficeenhanced.js:98099
Here, the images load on Chrome and Firefox but do not on Safari. However, in e.g. all-types.html, they also do not load on any browser.