Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

`logo_url` fails to load

Open
#31 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
php
Domain
security

Research direction

The issue names custom logo_url handling and a Content Security Policy error, but no file or test entry point. Search the repository for logo_url and the reported img-src policy, then reproduce the blocked image load; done means a configured custom logo loads without violating the policy.

Written by the indexing model from the issue text.

Description

(X-CC-Version: 2018-03-22)

When using a custom logo_url the image fails to load throwing the following error:

Refused to load the image 'https://[edited].com/image.jpg' because it violates the following Content Security Policy directive: "img-src 'self' data: https://exceptions.coinbase.com/js https://res.cloudinary.com https://www.google-analytics.com/ https://images.coinbase.com".

The domain is whitelisted in the account settings, so not sure what's the problem. I guess the Content-Security-Policy has to be relaxed?

Dominant language
PHP
Stars
149
Forks
157
PR merge metrics
No merged PRs in 30d

Getting set up

  • No Dockerfile or Docker Compose file
  • Has a pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from coinbase/coinbase-commerce-php

All issues in coinbase/coinbase-commerce-php

Similar issues

More PHP issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.