Skip to content
Discussion options

You must be logged in to vote

www is making a difference because those become two different domain names (even though technically they are currently pointing to the same server & loading) from the point of view of the web browser. You can see this in the CSP violation:

There are multiple way to fix this. The cleanest one IMHO is put a redirection 301 on your www to the domain without the www. Another way is to add SECURITY_HEADER_CSP_IMG_SRC=https://harlowsteelband.org.uk to your .env file. So that the browser does not complain about it (that said, I do not have guaranties it is not going to break else where).

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@hawkesri
Comment options

Answer selected by hawkesri
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants