dify icon indicating copy to clipboard operation
dify copied to clipboard

In udify.app, can't display external images because of CSP

Open andrebalza opened this issue 4 months ago • 1 comments

Self Checks

  • [X] This is only for bug report, if you would like to ask a question, please head to Discussions.
  • [X] I have searched for existing issues search for existing issues, including closed ones.
  • [X] I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
  • [X] [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:)
  • [X] Please do not modify this template :) and fill in all the required fields.

Dify version

0.10.1

Cloud or Self Hosted

Cloud

Steps to reproduce

1.	Have the udify.app load an image from any external source (ex. loaded from markdown).
2.	Attempt to load the image, and observe the CSP error in the browser console.

✔️ Expected Behavior

External images should load without CSP violations, allowing for integration of external image sources as needed.

❌ Actual Behavior

External images are currently blocked by the CSP, preventing them from loading. Browser console error message: Refused to load the image 'https://omitted.omitted.fi/Cover/Show?id=kyyti.639346&index=0&size=large' because it violates the following Content Security Policy directive: "img-src 'self' data: mediastream: blob: filesystem: 'nonce-MDdlNWNlZjYtMzg0MS00ZjI0LTk0ZDAtNWZiNzM5ZjQwNmM3' *.dify.ai *.udify.app udify.app .cloudflareinsights.com .sentry.io http://localhost: http://127.0.0.1: https://analytics.google.com googletagmanager.com *.googletagmanager.com https://www.google-analytics.com https://api.github.com".

andrebalza avatar Oct 25 '24 14:10 andrebalza