Skip to content

Generated html reports can't be loaded properly because of CSP #173

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
amalinko opened this issue Aug 12, 2016 · 6 comments
Open

Generated html reports can't be loaded properly because of CSP #173

amalinko opened this issue Aug 12, 2016 · 6 comments

Comments

@amalinko
Copy link

First of all, thank you guys for great plugin.
But we have a problem. I'm not sure if it could be changed or it is absolutely by design.
We've updated our Jenkins and new version uses CSP. And Scoverage generates HTML with external sources. For example:
https://github.com/scoverage/scalac-scoverage-plugin/blob/master/scalac-scoverage-plugin/src/main/resources/scoverage/index.html
It has <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/pure/0.3.0/pure-min.css"> in it. So this style can't be loaded, because it is external resource.
While CSP in Jenkins could be configured, it's not very convenient because either we have to find all sources Scoverage uses or to switch the policy off completely. Is it possible to make Scoverage reports CSP compatible?

@gslowikowski
Copy link
Member

See my comment (and other comments as well).

@xohzzwn6kcj9
Copy link

any updates on this?

@Johnlon
Copy link

Johnlon commented Dec 14, 2017

+1. Long time, no fix

@ALPSMAC
Copy link

ALPSMAC commented Feb 28, 2018

Just adding to the list of folks who would like to see a fix for this. The Jenkins instance we use can not just open up CSP to a full CDN.

@etspaceman
Copy link

+1

@ziggystar
Copy link

ziggystar commented May 15, 2018

Maybe it would be a start if someone finds out how this can be fixed? Is it only about this stylesheet? Can't we simply include it with the report? Maybe make it an setting to include the css file, or not.

The ability to view a coverage report on a CI server is a very basic requirement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

7 participants