Hello,
for one of my plugins I need to access local server which is running on port 30093 and responding in JSON format. Cockpit is running on port 30092. Simple AJAX with jQuery fails with message:
Refused to connect to 'https://0.0.0.0:30093/get_servers_json' because it violates the following Content Security Policy directive: "connect-src 'self' https://:30092 ws: wss:".
(anonymous) @ VM7040:1
send @ jquery-3.2.1.min.js:4
ajax @ jquery-3.2.1.min.js:4
(anonymous) @ ezpz_live_server_list.html:20
dispatch @ jquery-3.2.1.min.js:3
q.handle @ jquery-3.2.1.min.js:3
AJAX:
$.ajax({
url: "https://0.0.0.0:30093/get_servers_json",
success: function(data) {
console.log("success");
console.log(data);
}
});
I tried to add localhost to connect-src in manifest.json of my plugin:
"content-security-policy": "default-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src https://0.0.0.0"
But Cockpit ignores it with message:
:30092/cockpit/@localhost/ezpz_live_server_list/ezpz_live_server_list.html#/:1 Ignoring duplicate Content-Security-Policy directive 'connect-src'.
Thanks for help and thumbs up for this nice project :)