You are viewing a single comment's thread from:

RE: How To Use SteemWorld On Hive [Tutorial]

in #steemworld4 years ago

OK, I got it.

There is Content-Security-Policy thing that restricts connections to outside. You can check it here https://securityheaders.com

Content-Security-Policy default-src 'self'; connect-src 'self' steemworld-ws.org api.steemit.com api.justyy.com api.steemitstage.com steemd.privex.io steemitimages.com api.steem-engine.com scot-api.steem-engine.com; font-src 'self'; frame-ancestors 'none'; frame-src 'self'; img-src * data:; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'

Workaround would be to use "local" steemworld without those restrictions, but downloadable versions does not exist anymore.

Sort:  

Exactly as I've thought. It's strange that it worked a couple of hours earlier. DId the headers change in the meantime?

Yes, downloadable version ... I had it on my drive and I went searching for it ... yet I couldn't find it. Wait, I'll check on another workstation ...

I've found a version from August 2019 and it's working with Hive :)

I believe there were no changes in headers, because they restrict usage by domains that are listed there.

So, to fix this issue @steemchiller has to add HIVE domains to the allowed list:

connect-src 'self' api.hive.blog anyx.io api.hivekings.com

@scorer
I replaced steempeak with peakd in one of the javascript files and now notification links open in peakd as expected.

I am a happy camper now :)

I believe you can do it by save to file, make changes to config and later load this config file back. You do not have to change the javascript.