[HTTP跨域请求]content-security-policy frame-ancestors

hbghlyj · Posted at 2022-7-10 07:41:53

用iframe嵌入一个w3school的页面,由于“安全原因”不能嵌入.
giphy (2).png

原来是HTTP头部有content-security-policy frame-ancestors
giphy (2).png

hbghlyj · Posted at 2022-7-15 23:19:31

Last edited by hbghlyj at 2022-7-16 08:51:00

一楼的两个图片在Chrome中正常显示,但是在Firefox中总是加载失败,在新标签页打开后显示“编码错误”

I have filed a bug report at bugzilla 1779791. It should be classified in Graphics: ImageLib component.

PNG Structure
PNG file chunk inspector
PNG specification - W3C

hbghlyj · Posted at 2022-7-16 15:36:12

hbghlyj 发表于 2022-7-15 16:19
I have filed a bug report at bugzilla 1779791. It should be classified in Graphics: ImageLib compon ...

Timothy Nikkel :

So it looks like MS Paint is not apng aware and it just moves/saves the edited IDAT at/to the end of the file, which messes up the apng sequence numbering and gives us two fcTL in a row at the start where the IDAT used to be. Per spec wiki.mozilla.org/APNG_Specification these are supposed to be rejected. But it seems like we could be more permissive in allowing this kind of error.

		Remember me	Forgot password?
Password			Create new account

[HTTP跨域请求]content-security-policy frame-ancestors

Viewed forums