Skip to content

GitHub.com's CSP directives prevent loading of GitHub.com pages when clicking GitHub ribbon #384

@cvan

Description

@cvan
  1. Load https://aframe.io/examples/showcase/hello-metaverse/ or https://aframe.io/examples/showcase/a-painter/
  2. Click the GitHub octocat icon in the bottom-left corner
  3. Notice the GitHub page cannot be loaded because of GitHub.com's CSP directives

Refused to display 'https://github.com/ngokevin/kframe/tree/master/components/text/examples/vaporwave/' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

screen shot 2016-10-26 at 3 16 00 am

Refused to display 'https://github.com/aframevr/a-painter' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

screen shot 2016-10-26 at 3 16 30 am

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions