Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Container with CSP and offline support #226

Open
GAS85 opened this issue Oct 4, 2022 · 3 comments
Open

Container with CSP and offline support #226

GAS85 opened this issue Oct 4, 2022 · 3 comments
Labels
approved Confirmed and ready for development. feature Feature request or suggestion

Comments

@GAS85
Copy link

GAS85 commented Oct 4, 2022

Feature

Jsoncrack editor will call multiple external domains (cloudflare, gstatic, googletagmanager, sentry.io) to fetch css, js, etc additional data. This is makes it hard to deploy on servers with limited CSP settings, and require additional Security and Privacy User agreement.
изображение

It would be nice to have kind of "offline" editor Version, e.g. managed via variables give admin opportunity to disable external sites calling and fetch static data only from the container.

Alternative solutions or implementations

Such approach is implemented in swagger editor v4, where admin can even disable parts of the editor simply via variables.
Basically ether before to build container source code should be cleaned up from the external resources and replaced with local links, or by container start.

Other context

E.g. how it was done for other project. amnuts/opcache-gui#84

@GAS85 GAS85 added the feature Feature request or suggestion label Oct 4, 2022
@AykutSarac
Copy link
Owner

Actually a PWA exists for the app but seem to be disabled for some reason, which was caching the homepage for offline callback so you were able to access it without internet. I'll review to alternatives available.

@mpern
Copy link

mpern commented Nov 23, 2022

Asking the naive question:
is there a way to bundle (webpack, rollup ...) the whole thing and don't access any third party resources over the network at all at runtime?

@GAS85
Copy link
Author

GAS85 commented Mar 14, 2023

This is a point of this ticket - zero access to 3rd party resources.

@AykutSarac AykutSarac added the approved Confirmed and ready for development. label Nov 17, 2024
@AykutSarac AykutSarac pinned this issue Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Confirmed and ready for development. feature Feature request or suggestion
Projects
None yet
Development

No branches or pull requests

3 participants