CORS resources
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 52/100
Research direction
Start by inspecting how release candidate and snapshot information is loaded into openscad.org and how final releases are supplied in this repository. Compare serving JSON from files.openscad.org with storing the information here and updating it through GitHub Actions. Done means the information loads without embedded JavaScript code injection and the chosen update path is automated or has the required CORS header.
Written by the indexing model from the issue text.
Description
The current information about release candidate and snapshots are loaded from files.openscad.org . This is a cross origin request.
As workaround the files are served as embedded javascript. This enables code injection.
Json would be safe, but requires to set the cors header to allow the resource to be loaded by openscad.org
Is it possible to set the cors header on files.openscad.org?
Or supply the rc and snapshot information with this repository like the final releases and automate the update of the information by github actions?
- Dominant language
- HTML
- Stars
- 34
- Forks
- 59
- Avg merge
- 3h 48m
- Merged PRs (30d)
- 21
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from openscad/openscad.github.com
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
openscad/openscad.github.com#196 · 6 comments ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 55/100
openscad/openscad.github.com#194 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
openscad/openscad.github.com#185 · 9 comments ·
Maintainers usually reply within 1 day
-
List of possible choresPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 5/5 Over a week Newbie friendliness 25/100
openscad/openscad.github.com#131 · 5 comments · 1 reaction ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
openscad/openscad.github.com#123 · 1 comment · 1 reaction ·
Maintainers usually reply within 1 day
All issues in openscad/openscad.github.com
Similar issues
-
ai-inspected
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
[Bug]: multi-arch `vgpu-device-manager` image digest not pinned in OLM bundlePossibly taken @MrBeldum claimed this today. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
NVIDIA/gpu-operator#3012 · 1 comment ·
Maintainers usually reply within 1 day
-
bug customer-reported
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
MagnaCapax/PMSS#1011 ·
Maintainers usually reply within 5 days
-
[v2 Bug] latest-wrangler fails with a misleading TypeError when the GitHub API call failsPossibly taken @GertL claimed this today. Openbug engine:v2 status:triage triage type:bug v2
Difficulty 2/5 1-3 hours Newbie friendliness 77/100
Maintainers usually reply within 1 day
-
[CI] Core CI doesn't run for changes to amoro-format-lance (and amoro-web)Possibly taken @MarkAlex1234 claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 88/100
Maintainers usually reply within 2 days