Skip to content

fix(landing): update avatar urls to resolve CSP errors - #266

Merged
prem22k merged 3 commits into
mainfrom
fix/csp-avatar-images
Aug 15, 2026
Merged

fix(landing): update avatar urls to resolve CSP errors#266
prem22k merged 3 commits into
mainfrom
fix/csp-avatar-images

Conversation

@eesha264

Copy link
Copy Markdown
Member

Description

Updates the avatar image URLs in ContributorTicket.tsx to directly use avatars.githubusercontent.com instead of github.com. This resolves a Content Security Policy (CSP) violation occurring in production (Vercel) due to the strict img-src directive in vercel.json. Also adds documentation for the bug fix in docs/bug-fixes/csp-avatar-images-fix.md.

Copilot AI lite review requested due to automatic review settings August 15, 2026 08:50

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@vercel

vercel Bot commented Aug 15, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
zync Ready Ready Preview Aug 15, 2026 9:20am

@github-actions github-actions Bot added area:backend Node.js backend code area:tests Test files and testing infrastructure area:backend-routes Backend API routes area:frontend React/web frontend code area:frontend-components React components area:docs Documentation area:backend-services Backend services area:frontend-types labels Aug 15, 2026
…, remove stray .gradle file

- Add ?s=48 to GitHub avatar URLs (346KB -> 19KB, 94% reduction)
- Add loading=lazy + width/height to prevent layout shift
- Replace 7 dicebear/pravatar URLs in DesktopPreview.tsx with ui-avatars.com (CSP-compliant)
- Remove stray .gradle cache file and add .gradle/ to .gitignore
- Update documentation with all changes
@prem22k
prem22k merged commit 468ea3b into main Aug 15, 2026
7 checks passed
@prem22k
prem22k deleted the fix/csp-avatar-images branch August 15, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:backend Node.js backend code area:backend-routes Backend API routes area:backend-services Backend services area:ci CI/CD and GitHub Actions area:docs Documentation area:frontend React/web frontend code area:frontend-components React components area:frontend-types area:github area:tests Test files and testing infrastructure

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants