[
https://issues.apache.org/jira/browse/ATTIC-235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17947512#comment-17947512
]
Sebb commented on ATTIC-235:
----------------------------
I've fixed most of the 3rd party references in those websites, apart from:
ARCHIVA - Google search and GH fork image
They both still work, but the GH image does not display and looks a bit ugly.
Maybe drop the image?
TRAFODION - site.css refers to bg.png, which I have so far been unable to trace.
> Fix Project Website Rendering/Navigation Issues caused by the CSP
> -----------------------------------------------------------------
>
> Key: ATTIC-235
> URL: https://issues.apache.org/jira/browse/ATTIC-235
> Project: Attic
> Issue Type: Task
> Reporter: Niall Pemberton
> Priority: Major
> Attachments: svn-ace-deployed-jquery.patch,
> svn-ace-source-jquery.patch, svn-lucy-deployed-style.patch,
> svn-lucy-source-style.patch, svn-ode-deployed-jquery.patch,
> svn-ode-source-jquery.patch, svn-rave-deployed-js-2.patch,
> svn-rave-source-js.patch
>
>
> The implementation of the *_Content Security Policy_* (CSP) at the beginning
> of March 2025 has affected either the rendering or menus of seven project
> websites that are retired.
> * Only the home pages of project websites were checked, so there could be
> issues in other areas.
> * 37 Projects were completely unaffected by the CSP (3 don't have websites -
> ojb, joshua & quetz)
> * Other CSP issues that didn't seem to affect rendering or navigstion were
> ignored (Fonts, Search, Images, YouTube, Twitter, JS etc)
> h1. RENDERING
> The following sites have Rendering Issues (i.e. look a mess):
> h3. -AURORA-
> *Description:* [Aurora|https://aurora.apache.org/] not rendering correctly
> because the CSP is preventing the bootstrap.min.css from loading. Add local
> copy to fix.
> * Deployed Site: [github.com/apache/aurora-website
> (asf-site)|https://github.com/apache/aurora-website/tree/asf-site]
> * Deployed Site Chnages: [github.com/niallkp/aurora-website
> (asf-site)|https://github.com/niallkp/aurora-website/tree/asf-site]
> h3. -LUCY-
> *(Fixed by CSP Change - INFRA-26679)*
> *Description:* [Lucy|https://lucy.apache.org/] not rendering correctly
> because the CSP is preventing the apache.org/css/style.css from loading.There
> are three ways to fix this issue 1) add the style sheets locally 2) add a
> .htaccess file to allow [https://*.apache.org|https://*.apache.org/] to
> src-style or 3) Get the CSP changed (see INFRA-26679)
> * Site Source: [https://svn.apache.org/repos/asf/lucy/site/trunk/]
> * Site Source Patch: *svn-lucy-source-style.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/lucy/content/]
> * Deployed Site Patch: *svn-lucy-deployed-style.patch*
> h3. -TRAFODION-
> *Description:* [Trafodion|https://trafodion.apache.org/] not rendering
> correctly because the CSP is preventing the CSS(3) & JS(3) from loading. Add
> local copies to fix.
> * Deployed Site: [github.com/apache/trafodion-site
> (asf-site)|https://github.com/apache/trafodion-site/tree/asf-site]
> * Deployed Site Chnages: [github.com/niallkp/trafodion-site
> (asf-site)|https://github.com/niallkp/trafodion-site/tree/asf-site]
> h3. -TWILL-
> *Description:* [Twill|https://twill.apache.org/] not rendering corretcly
> because the CSP is preventing the bootstrap css's & jQuery from loading. Add
> these local copies to site.
> * Deployed Site: [https://svn.apache.org/repos/asf/twill/site/]
> * Deployed Site Patch: *twill-css-js.patch* in ATTIC-230
> h1. NAVIGATION
> -The following sites menus don't work-: (now fixed in deployed sites)
> h3. ACE
> *Description:* [Ace|https://ace.apache.org/] menus don't work because the CSP
> is preventing jQuery from loading. Fix adds a local copy of jQuery.
> * Site Source: [https://svn.apache.org/repos/asf/ace/site/trunk/]
> * Site Source Patch: *svn-ace-source-jquery.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/ace/content/]
> * Deployed Site Patch: *svn-ace-deployed-jquery.patch - DONE*
> h3. ODE
> *Description:* [ODE|https://ode.apache.org/] menus don't work because the CSP
> is preventing jQuery from loading. Fix adds a local copy of jQuery.
> * Site Source: [https://svn.apache.org/repos/asf/ode/site/trunk/]
> * Site Source Patch: *svn-ode-source-jquery.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/ode/content/]
> * Deployed Site Patch: *svn-ode-deployed-jquery.patch - DONE*
> h3. RAVE
> *Description:* [Rave|https://rave.apache.org/] menus don't work because the
> CSP is preventing jQuery & Bootstrao from loading. Fix adds a local copy of
> jQuery & Bootstrap.
> * Site Source: [https://svn.apache.org/repos/asf/rave/site/trunk/]
> * Site Source Patch: *svn-rave-source-js.patch*
> * Deployed Site: [https://svn.apache.org/repos/infra/sites/rave/content/]
> * Deployed Site Patch: *svn-rave-deployed-js.patch - DONE*
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
