Uploaded image for project: 'OpenOLAT'
  1. OpenOLAT
  2. OO-5030

Streams in m3u8 format load external resource in chrome/firefox -> blocked by CSP

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 15.2.8, 15.3.2
    • Component/s: None
    • Labels:
      None

      Description

      An hls stream (m3u8 format) integrated via URL Import in authoring area is not displayed in Firefox and Chrome-based browsers (+Chromium, new Edge). Error message: Content Security Policy: The page settings have blocked the loading of a resource on https://cdn.jsdelivr.net/npm/hls.js@latest ("script-src").

      Safari, old Edge and Explorer seem to have the resource locally, so no problem with these browsers.

      If CSP is deactivated, the stream is also displayed in all browsers.

      The resource can be referenced locally - no reloading of external resources.

        Figma for Jira By 42nd

          Attachments

            Activity

              People

              Assignee:
              srosse Stéphane Rossé
              Reporter:
              jschindler Julia Schindler
              Tester:
              Mandy Menzel
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: