[
https://issues.apache.org/jira/browse/ATTIC-235?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sebb updated ATTIC-235:
-----------------------
Description:
The implementation of the *_Content Security Policy_* (CSP) at the beginning of
March 2025 has affected either the rendering or menus of seven project websites
that are retired.
* Only the home pages of project websites were checked, so there could be
issues in other areas.
* 37 Projects were completely unaffected by the CSP (3 don't have websites -
ojb, joshua & quetz)
* Other CSP issues that didn't seem to affect rendering or navigstion were
ignored (Fonts, Search, Images, YouTube, Twitter, JS etc)
h1. RENDERING
The following sites have Rendering Issues (i.e. look a mess):
h3. AURORA
*Description:* [Aurora|https://aurora.apache.org/] not rendering correctly
because the CSP is preventing the bootstrap.min.css from loading. Add local
copy to fix.
* Deployed Site: [github.com/apache/aurora-website
(asf-site)|https://github.com/apache/aurora-website/tree/asf-site]
* Deployed Site Chnages: [github.com/niallkp/aurora-website
(asf-site)|https://github.com/niallkp/aurora-website/tree/asf-site]
h3. -LUCY-
*(Fixed by CSP Change - INFRA-26679)*
*Description:* [Lucy|https://lucy.apache.org/] not rendering correctly because
the CSP is preventing the apache.org/css/style.css from loading.There are three
ways to fix this issue 1) add the style sheets locally 2) add a .htaccess file
to allow https://*.apache.org to src-style or 3) Get the CSP changed (see
INFRA-26679)
* Site Source: [https://svn.apache.org/repos/asf/lucy/site/trunk/]
* Site Source Patch: *svn-lucy-source-style.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/lucy/content/]
* Deployed Site Patch: *svn-lucy-deployed-style.patch*
h3. TRAFODION
*Description:* [Trafodion|https://trafodion.apache.org/] not rendering
correctly because the CSP is preventing the CSS(3) & JS(3) from loading. Add
local copies to fix.
* Deployed Site: [github.com/apache/trafodion-site
(asf-site)|https://github.com/apache/trafodion-site/tree/asf-site]
* Deployed Site Chnages: [github.com/niallkp/trafodion-site
(asf-site)|https://github.com/niallkp/trafodion-site/tree/asf-site]
h3. -TWILL-
*Description:* [Twill|https://twill.apache.org/] not rendering corretcly
because the CSP is preventing the bootstrap css's & jQuery from loading. Add
these local copies to site.
* Deployed Site: [https://svn.apache.org/repos/asf/twill/site/]
* Deployed Site Patch: *twill-css-js.patch* in ATTIC-230
h1. NAVIGATION
The following sites menus don't work:
h3. ACE
*Description:* [Ace|https://ace.apache.org/] menus don't work because the CSP
is preventing jQuery from loading. Fix adds a local copy of jQuery.
* Site Source: [https://svn.apache.org/repos/asf/ace/site/trunk/]
* Site Source Patch: *svn-ace-source-jquery.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/ace/content/]
* Deployed Site Patch: *svn-ace-deployed-jquery.patch*
h3. ODE
*Description:* [ODE|https://ode.apache.org/] menus don't work because the CSP
is preventing jQuery from loading. Fix adds a local copy of jQuery.
* Site Source: [https://svn.apache.org/repos/asf/ode/site/trunk/]
* Site Source Patch: *svn-ode-source-jquery.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/ode/content/]
* Deployed Site Patch: *svn-ode-deployed-jquery.patch*
h3. RAVE
*Description:* [Rave|https://rave.apache.org/] menus don't work because the CSP
is preventing jQuery & Bootstrao from loading. Fix adds a local copy of jQuery
& Bootstrap.
* Site Source: [https://svn.apache.org/repos/asf/rave/site/trunk/]
* Site Source Patch: *svn-rave-source-js.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/rave/content/]
* Deployed Site Patch: *svn-rave-deployed-js.patch*
was:
The implementation of the *_Content Security Policy_* (CSP) at the beginning of
March 2025 has affected either the rendering or menus of seven project websites
that are retired.
* Only the home pages of project websites were checked, so there could be
issues in other areas.
* 37 Projects were completely unaffected by the CSP (3 don't have websites -
ojb, joshua & quetz)
* Other CSP issues that didn't seem to affect rendering or navigstion were
ignored (Fonts, Search, Images, YouTube, Twitter, JS etc)
h1. RENDERING
The following sites have Rendering Issues (i.e. look a mess):
h3. AURORA
*Description:* [Aurora|https://aurora.apache.org/] not rendering correctly
because the CSP is preventing the bootstrap.min.css from loading. Add local
copy to fix.
* Deployed Site: [github.com/apache/aurora-website
(asf-site)|https://github.com/apache/aurora-website/tree/asf-site]
* Deployed Site Chnages: [github.com/niallkp/aurora-website
(asf-site)|https://github.com/niallkp/aurora-website/tree/asf-site]
h3. -LUCY-
*(Fixed by CSP Change - INFRA-26679)*
*Description:* [Lucy|https://lucy.apache.org/] not rendering correctly because
the CSP is preventing the apache.org/css/style.css from loading.There are three
ways to fix this issue 1) add the style sheets locally 2) add a .htaccess file
to allow https://*.apache.org to src-style or 3) Get the CSP changed (see
INFRA-26679)
* Site Source: [https://svn.apache.org/repos/asf/lucy/site/trunk/]
* Site Source Patch: *svn-lucy-source-style.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/lucy/content/]
* Deployed Site Patch: *svn-lucy-deployed-style.patch*
h3. TRAFODION
*Description:* [Trafodion|https://trafodion.apache.org/] not rendering
correctly because the CSP is preventing the CSS(3) & JS(3) from loading. Add
local copies to fix.
* Deployed Site: [github.com/apache/trafodion-site
(asf-site)|https://github.com/apache/trafodion-site/tree/asf-site]
* Deployed Site Chnages: [github.com/niallkp/trafodion-site
(asf-site)|https://github.com/niallkp/trafodion-site/tree/asf-site]
h3. TWILL
*Description:* [Twill|https://twill.apache.org/] not rendering corretcly
because the CSP is preventing the bootstrap css's & jQuery from loading. Add
these local copies to site.
* Deployed Site: [https://svn.apache.org/repos/asf/twill/site/]
* Deployed Site Patch: *twill-css-js.patch* in ATTIC-230
h1. NAVIGATION
The following sites menus don't work:
h3. ACE
*Description:* [Ace|https://ace.apache.org/] menus don't work because the CSP
is preventing jQuery from loading. Fix adds a local copy of jQuery.
* Site Source: [https://svn.apache.org/repos/asf/ace/site/trunk/]
* Site Source Patch: *svn-ace-source-jquery.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/ace/content/]
* Deployed Site Patch: *svn-ace-deployed-jquery.patch*
h3. ODE
*Description:* [ODE|https://ode.apache.org/] menus don't work because the CSP
is preventing jQuery from loading. Fix adds a local copy of jQuery.
* Site Source: [https://svn.apache.org/repos/asf/ode/site/trunk/]
* Site Source Patch: *svn-ode-source-jquery.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/ode/content/]
* Deployed Site Patch: *svn-ode-deployed-jquery.patch*
h3. RAVE
*Description:* [Rave|https://rave.apache.org/] menus don't work because the CSP
is preventing jQuery & Bootstrao from loading. Fix adds a local copy of jQuery
& Bootstrap.
* Site Source: [https://svn.apache.org/repos/asf/rave/site/trunk/]
* Site Source Patch: *svn-rave-source-js.patch*
* Deployed Site: [https://svn.apache.org/repos/infra/sites/rave/content/]
* Deployed Site Patch: *svn-rave-deployed-js.patch*
> Fix Project Website Rendering/Navigation Issues caused by the CSP
> -----------------------------------------------------------------
>
> Key: ATTIC-235
> URL: https://issues.apache.org/jira/browse/ATTIC-235
> Project: Attic
> Issue Type: Task
> Reporter: Niall Pemberton
> Priority: Major
> Attachments: svn-ace-deployed-jquery.patch,
> svn-ace-source-jquery.patch, svn-lucy-deployed-style.patch,
> svn-lucy-source-style.patch, svn-ode-deployed-jquery.patch,
> svn-ode-source-jquery.patch, svn-rave-deployed-js.patch,
> svn-rave-source-js.patch
>
>
> The implementation of the *_Content Security Policy_* (CSP) at the beginning
> of March 2025 has affected either the rendering or menus of seven project
> websites that are retired.
> * Only the home pages of project websites were checked, so there could be
> issues in other areas.
> * 37 Projects were completely unaffected by the CSP (3 don't have websites -
> ojb, joshua & quetz)
> * Other CSP issues that didn't seem to affect rendering or navigstion were
> ignored (Fonts, Search, Images, YouTube, Twitter, JS etc)
>
> h1. RENDERING
> The following sites have Rendering Issues (i.e. look a mess):
> h3. AURORA
> *Description:* [Aurora|https://aurora.apache.org/] not rendering correctly
> because the CSP is preventing the bootstrap.min.css from loading. Add local
> copy to fix.
> * Deployed Site: [github.com/apache/aurora-website
> (asf-site)|https://github.com/apache/aurora-website/tree/asf-site]
> * Deployed Site Chnages: [github.com/niallkp/aurora-website
> (asf-site)|https://github.com/niallkp/aurora-website/tree/asf-site]
> h3. -LUCY-
> *(Fixed by CSP Change - INFRA-26679)*
> *Description:* [Lucy|https://lucy.apache.org/] not rendering correctly
> because the CSP is preventing the apache.org/css/style.css from loading.There
> are three ways to fix this issue 1) add the style sheets locally 2) add a
> .htaccess file to allow https://*.apache.org to src-style or 3) Get the CSP
> changed (see INFRA-26679)
> * Site Source: [https://svn.apache.org/repos/asf/lucy/site/trunk/]
> * Site Source Patch: *svn-lucy-source-style.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/lucy/content/]
> * Deployed Site Patch: *svn-lucy-deployed-style.patch*
> h3. TRAFODION
> *Description:* [Trafodion|https://trafodion.apache.org/] not rendering
> correctly because the CSP is preventing the CSS(3) & JS(3) from loading. Add
> local copies to fix.
> * Deployed Site: [github.com/apache/trafodion-site
> (asf-site)|https://github.com/apache/trafodion-site/tree/asf-site]
> * Deployed Site Chnages: [github.com/niallkp/trafodion-site
> (asf-site)|https://github.com/niallkp/trafodion-site/tree/asf-site]
> h3. -TWILL-
> *Description:* [Twill|https://twill.apache.org/] not rendering corretcly
> because the CSP is preventing the bootstrap css's & jQuery from loading. Add
> these local copies to site.
> * Deployed Site: [https://svn.apache.org/repos/asf/twill/site/]
> * Deployed Site Patch: *twill-css-js.patch* in ATTIC-230
> h1. NAVIGATION
> The following sites menus don't work:
> h3. ACE
> *Description:* [Ace|https://ace.apache.org/] menus don't work because the CSP
> is preventing jQuery from loading. Fix adds a local copy of jQuery.
> * Site Source: [https://svn.apache.org/repos/asf/ace/site/trunk/]
> * Site Source Patch: *svn-ace-source-jquery.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/ace/content/]
> * Deployed Site Patch: *svn-ace-deployed-jquery.patch*
> h3. ODE
> *Description:* [ODE|https://ode.apache.org/] menus don't work because the CSP
> is preventing jQuery from loading. Fix adds a local copy of jQuery.
> * Site Source: [https://svn.apache.org/repos/asf/ode/site/trunk/]
> * Site Source Patch: *svn-ode-source-jquery.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/ode/content/]
> * Deployed Site Patch: *svn-ode-deployed-jquery.patch*
> h3. RAVE
> *Description:* [Rave|https://rave.apache.org/] menus don't work because the
> CSP is preventing jQuery & Bootstrao from loading. Fix adds a local copy of
> jQuery & Bootstrap.
> * Site Source: [https://svn.apache.org/repos/asf/rave/site/trunk/]
> * Site Source Patch: *svn-rave-source-js.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/rave/content/]
> * Deployed Site Patch: *svn-rave-deployed-js.patch*
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
