Facebook login works but no avatar showing up

Schryvers

Vanilla 2.1.3
Ozone theme premium 2.1
Facebook plugin (standard vanilla plugin)

Login via facebook works but the avatar doesnt shows, it says its a broken image. But when i rightclick on the avatar en going to the location of the facebook image, this image does exist so i dont know why it doesnt show up.

The avatar on the left on topic titles or reacties, doesnt shows a image at al, but where the avatar need to be theres showing up the facebooks username instead of the facebook image.

Doesnt this plugin needs to work out of the box because it is packaged within the original vanilla package?

Hope someone can help me,

dont know if i can upload the adres so you can see it by yourself.

vrijvlinder

http://www.mantisbt.org/bugs/view.php?id=17491

http://en.wikipedia.org/wiki/Content_Security_Policy

X-Content-Security-Policy — experimental header introduced in Gecko 2 based browsers (Firefox 4 to Firefox 22, Thunderbird 3.3, SeaMonkey 2.1).

This is something that seems to affect firefox because Chrome and Safari use something else

The only solution is to try to disable that in the browser apparently by using some kind of header as explained in the first link I posted. These folks seem to have the problem with gravatars not showing in Firefox.

https://www.owasp.org/index.php/Content_Security_Policy

https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Using_Content_Security_Policy

https://developer.mozilla.org/en-US/docs/Web/Security/CSP

https://github.com/blog/1477-content-security-policy

http://docs.spring.io/spring-security/site/docs/3.2.0.CI-SNAPSHOT/reference/html/headers.html

vrijvlinder

Looks like that is firefox ? have you tried to look at it using safari or other browsers ?

Schryvers

Well @vrijvlinder‌

So why does it work in chrome and not in firefox? 80% of my users coming thru firefox....

Theres no patch or something for this?

vrijvlinder

http://www.mantisbt.org/bugs/view.php?id=17491

http://en.wikipedia.org/wiki/Content_Security_Policy

X-Content-Security-Policy — experimental header introduced in Gecko 2 based browsers (Firefox 4 to Firefox 22, Thunderbird 3.3, SeaMonkey 2.1).

This is something that seems to affect firefox because Chrome and Safari use something else

The only solution is to try to disable that in the browser apparently by using some kind of header as explained in the first link I posted. These folks seem to have the problem with gravatars not showing in Firefox.

https://www.owasp.org/index.php/Content_Security_Policy

https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Using_Content_Security_Policy

https://developer.mozilla.org/en-US/docs/Web/Security/CSP

https://github.com/blog/1477-content-security-policy

http://docs.spring.io/spring-security/site/docs/3.2.0.CI-SNAPSHOT/reference/html/headers.html

Schryvers

Well thats a fail on firefox..... problem is now i need to disable facebook login because in ff the whole layout gets fckd up.

If theres an solution please lemme know.