Page MenuHomeMiraheze

Add to fastly.jsdelivr.net CSP list
Closed, ResolvedPublic

Description

Miraheze wiki URL:xtexvnet.miraheze.org

fastly.jsdelivr.net is one of the CDN subdomains of jsdelivr.net, some old scripts (like wikiplus-highlight) are still using it.
Is it possible to allow *.jsdelivr.net?

Event Timeline

Herald added subscribers: Unknown Object (User), Unknown Object (User), Reception123. · View Herald TranscriptFeb 3 2023, 01:49

This is just cdn.jsdelivr.net but over Fastly's network exclusively, so if cdn.jsdelivr.net was approved, this one will be easily approved (at least the fastly subdomain, not sure about wildcard, as SRE wants to keep additions to the CSP to the strict minimum necessary). However, the script can just be set to use cdn.jsdelivr.net and it would work without issues (which would be a 1 line change: https://github.com/bhsd-harry/Wikiplus-highlight/blob/c842b06377288de715fd9466aef3dfe80e4a3304/main.js#L99).

Reception123 claimed this task.
Reception123 moved this task from Tech Review to Completed on the CSP Review board.

jsdelivr.net went through the review process in T7883 and was approved. Since this is just a CDN, there is no need to re-review. Added.