converse.js: HTTP file upload failed

raw

1-README.rst

Refused to connect to 'https://cweiske.de:5444/asdf/asdf/6x6.png' because it violates the following Content Security Policy directive: "connect-src 'self' conversejs.org".

uploadFile @ converse.min.js:47274

This is a configuration problem on the server hosting conversejs. It needs to allow PUT to other servers in its CSP.

raw

2-ejabberd.rst

Failed to load https://cweiske.de:5444/ab/cd/ganzhoch.jpg: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://conversejs.org' is therefore not allowed access.

Add "Access-Control-Allow-Origin": "*"

Failed to load https://cweiske.de:5444/ab/cd/der_hufnagel.jpg: Method PUT is not allowed by Access-Control-Allow-Methods in preflight response.

Add "Access-Control-Allow-Methods": "PUT"

Failed to load https://cweiske.de:5444/ab/cd/fuchs.jpg: Request header field Content-type is not allowed by Access-Control-Allow-Headers in preflight response.

Add "Access-Control-Allow-Headers": "content-type"

raw

2-ejabberd.yml

1
2
3
4
5
6
  mod_http_upload:
    custom_headers:
      "Access-Control-Allow-Origin": "*"
      "Access-Control-Allow-Methods": "PUT"
      "Access-Control-Allow-Headers": "content-type"
 
Christian Weiske Christian Weiske
owner

History