Page MenuHomeMiraheze

CSP Whitelist request: cdn.smutstone.com
Closed, ResolvedPublic

Description

hello

i need to load an external file into a game calculator that we have.

Content Security Policy: The page’s settings blocked the loading of a resource at https://cdn.smutstone.com/s2/fb9ae4a0.conf.js (“default-src”).

i need this to be whitelisted, some other images are loaded from this path as well.
https://cdn.smutstone.com/s2/*

CSP REVIEW

  • Is the site equipped with a privacy policy? Yes
  • Does the site attempt to comply with the GDPR? Can European Union inhabitants invoke their individual rights? No, PP indicates that "Non-Registered users can watch content without registering and without any information being collected and processed"
  • Does the site provide a list of personal data being collected by using the service? Yes, see PP
  • Is the website owner known to have a bad reputation regarding privacy? No
  • Can wikis use the external service, even if the visitor wants to deny any cookies or other form of tracking? Unclear
  • Will wikis stay usable, even if the visitor blocks the external resource by using an ad blocker? Likely yes
  • Is there a Data Protection Officer and/or Privacy Team that can be contacted by Miraheze? No
  • Is the site equipped with a security policy? Yes, a short one on PP
  • Does the site clarify their security measures to protect collected user data? Can the site assure measures are being taken to protect code injection into the loaded external resources? No details; standard general assurance
  • Is the website owner known to have a bad reputation regarding information security? No
  • Is there a Chief Information Security Officer and/or Security Team that can be contacted by Miraheze? No

Event Timeline

anybody working here?
can i get some help..
i need this white listed.

can someone please look at this and tell me what do i need to do.

CSP Desicions can take a while

anything yet...?
how much time these things take? usually !

Unknown Object (User) added a comment.Aug 2 2021, 03:27

anything yet...?
how much time these things take? usually !

Currently all new CSP decisions were put on hold, so it is unknown when they will resume and when this can be done.

Before that was done, they usually only took a few days. Apologies for the inconvenience.

Reception123 renamed this task from i need to whitelist a domain in CSP to load external file from it to CSP Whitelist request: cdn.smutstone.com.Aug 3 2021, 06:01
Bukkit changed the task status from Open to Stalled.Aug 6 2021, 00:21

Stalled per T7699#155554

Unknown Object (User) changed the task status from Stalled to Open.Aug 6 2021, 00:50

Not stalled unless waiting on something externally, not internally.

any progress with the CSP decisions....still on hold ?!!

Herald removed a subscriber: Unknown Object (User). · View Herald TranscriptAug 23 2021, 23:51

While there are some deficiencies this seems to be another case where there is no private information collected within the scope of the GDPR so because of this it would seem to me that it could be approved, however T&S should probably double check.

Owen subscribed.

I agree with the assessment above.

John claimed this task.
John moved this task from DSRE Review to Completed on the CSP Review board.