CSP prevents access to the backend over http when the frontend accessed via https #2

New Issue

Open

opened 2020-10-16 17:23:48 +00:00 by lenrsmith · 0 comments

lenrsmith commented

2020-10-16 17:23:48 +00:00

Contributor

The content security policy configuration is not complete and it is causing issues when the site is accessed via https. Two things need to happen here:

Ember needs to use the same protocol by which it was accessed to issue requests to the backend.
The CSP configuration for both frontend and backend need to be completed.

The content security policy configuration is not complete and it is causing issues when the site is accessed via https. Two things need to happen here: 1. Ember needs to use the same protocol by which it was accessed to issue requests to the backend. 2. The CSP configuration for both frontend and backend need to be completed.