Hello, everyone.

I've looking around for a couple of hours and I can't seem to find people 
that have come up with an issue similar to mine.

I have a project that is pulling all of its JavaScript files from a CDN. 
Not many problems there, we ran into a couple of CORS errors, but were able 
to fix those by changing some headers in the server configuration file. The 
problem I'm having right now is that there are a couple of errors thrown 
from the AngularJS project itself. They all look like this:

Error: [$sce:insecurl] Blocked loading resource from url not allowed by 
$sceDelegate policy.  URL: template/tooltip/tooltip-popup.html

I noticed that the URL throwing this error is referring to a directive 
template. This template URL is set and used by the bootstrap-ui library. 
The way this library sets these template URLs is by creating an angular 
module for each of them and then using the $templateCache service to put 
the HTML template in it.

So these URLs aren't actual files served by the CDN, but they still have a 
route to them. I'm not quite sure how $templateCache serves up its 
templates or why it would throw an $sce:insecurl error when loading them. I 
tried adding "template/**" to the $sceDelegateProvider whitelist, but that 
was a shot at the dark as I don't really think that's the way to go. I also 
read something about wrapping URL uses around $sce.trustAsUrl, but this 
looks like it would need to happen whenever a request is made to one of 
these, and since this is happening inside an external library I also don't 
think it would be the ideal solution.

Thank you so much for taking the time to review this question. I'd be happy 
to provide more detail should you request it.

-- 
You received this message because you are subscribed to the Google Groups 
"AngularJS" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/angular.
For more options, visit https://groups.google.com/d/optout.

Reply via email to