contactsplus icon indicating copy to clipboard operation
contactsplus copied to clipboard

Contact photo is not shown in editor popup and not displayed in contact card

Open godfuture opened this issue 10 years ago • 7 comments

Background I have tried to import my old contacts from contacts app and noticed that my contact phtotos are missing.

Issue Now I have created a new contact and encountered the same issue. Contact photos are displayed nowhere, wheter in editor nor on card itself after edit.

OC: 8.1.1 Ubuntu: 15.04 ContactsPlus: 1.0.4

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/26360766-contact-photo-is-not-shown-in-editor-popup-and-not-displayed-in-contact-card?utm_campaign=plugin&utm_content=tracker%2F19713444&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F19713444&utm_medium=issues&utm_source=github).

godfuture avatar Sep 01 '15 13:09 godfuture

which browser do you use? it could be a CSP problem (content security police)!

libasys avatar Sep 02 '15 08:09 libasys

Firefox 40.0.3 on Windows 10 x64 Asset Pipelining is turned on.

godfuture avatar Sep 02 '15 12:09 godfuture

CSP problem! a fix is provided here on master: https://github.com/owncloud/core/commit/ead25de6282a1d8a6b78497a03187090ead9017b

libasys avatar Sep 02 '15 13:09 libasys

Thanks, this fix works! Maybe it is a good Idea to put this more prominently in the readme.md as many people will have this problem.

1337sup3rh4x0r avatar Sep 02 '15 16:09 1337sup3rh4x0r

This fix does not work for me.

OC: 8.1.1.3 Server: Linux, PHP 5.6.12. HTTPS, shared host. Contact plus: 1.0.7

PhilDirty avatar Sep 08 '15 13:09 PhilDirty

Extract from the Firefox console (removed the image contents): ''' Content Security Policy: Les paramètres de la page ont empêché le chargement d'une ressource à self (« script-src https://ssl.1and1.fr 'unsafe-eval' »). contactsplus Content Security Policy: Les paramètres de la page ont empêché le chargement d'une ressource à self (« script-src https://ssl.1and1.fr 'unsafe-eval' »). contactsplus:1:0 Content Security Policy: Les paramètres de la page ont empêché le chargement d'une ressource à data:image/jpeg;base64,xxxxcensoredxxxxxxx= (« img-src https://ssl.1and1.fr https://0 * ») '''

PhilDirty avatar Sep 08 '15 14:09 PhilDirty

I am not sure. Do I have to configure something in Owncloud or is the next OC update delivering the required "core" functionality?

many thanks

godfuture avatar Sep 11 '15 12:09 godfuture