Good morning all!
Due to pagure's new default content security policy src.fp.o users are getting a csp-error since the ui is trying to fetch a js file from apps.fp.o and the policy denies it.
We need a configuration change on src.fp.o to modify the csp policy on src{.stg}.fp.o instances to allow clients to fetch js files from apps.fp.o
I opened an issue on the tracker[0], but since we are on freeze now here goes the same patch for a FBR.
Regards,
[0]: https://pagure.io/fedora-infrastructure/issue/8121