Skip to content

Incorrect CSP configuration for gitlab integration #8111

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Drevoed opened this issue Apr 10, 2025 · 4 comments
Closed

Incorrect CSP configuration for gitlab integration #8111

Drevoed opened this issue Apr 10, 2025 · 4 comments
Assignees
Labels
bug Something isn't working UI Any broken visuals like layouts, colors etc.

Comments

@Drevoed
Copy link

Drevoed commented Apr 10, 2025

Version

0.14.16

Operating System

macOS

Distribution Method

dmg (Mac OS - Apple Silicon)

Describe the issue

The csp configuration does not allow custom adresses for gitlab integration.

And #8038 does not fix it. Because it only supports https://*.gitlab.com or https://gitlab.com.

e.g., what if user has a custom domain for self-hosted gitlab instance like this: https://mygitlab.acme.co?

How to reproduce (Optional)

No response

Expected behavior (Optional)

No response

Relevant log output (Optional)

@Drevoed Drevoed added the bug Something isn't working label Apr 10, 2025
@Byron Byron added the UI Any broken visuals like layouts, colors etc. label Apr 12, 2025
@Byron
Copy link
Collaborator

Byron commented Apr 12, 2025

Thanks a lot for reporting!

Maybe @Caleb-T-Owens can provide more context around the stage this feature is in, and what the plans are about it. Maybe supporting it would be easy if some URL validation is relaxed?

@krlvi
Copy link
Member

krlvi commented Apr 14, 2025

Hi @Drevoed, sorry for the trouble. The app does not support custom domains yet but this is something that we plan to explore solving this soon. Here is the parent issue: #4714

@krlvi
Copy link
Member

krlvi commented Apr 14, 2025

The next app release (0.14.19) will include a mechanism for adding custom CSP entries. I've also added documentation for how to configure this. If you wish to try it sooner, you can get the latest nightly build from here

Let me know if this helps.

@Drevoed
Copy link
Author

Drevoed commented Apr 25, 2025

Yes, thanks!

@Drevoed Drevoed closed this as completed Apr 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working UI Any broken visuals like layouts, colors etc.
Projects
None yet
Development

No branches or pull requests

3 participants