it doesnt seem to like the FOSSness of the * , but tor is working now

ive lifted a csp from (under 'to tighten further..' cheatsheetseries.owasp.org/cheatshe…nt_Security_Policy_Cheat_Sheet.html

which gives an A+ 🤷

and breaks the site, oops

too aggressive , ill leave it up for redsh4de to take a look at the browser console errors , otherwise have to revert to something else

<3​21bob321:monero.social> Which proxy is it ?

<3​21bob321:monero.social> Caddy ?

<r​edsh4de:matrix.org> good call, forgor about this: will add today

<r​edsh4de:matrix.org> will investigate

<r​edsh4de:matrix.org> pushed changes that resolves most of the csp issues, but update the headers to also include `media-src self blob: data:;` to allow loading local media content, and `font-src self data:;` to allow loading of the local fonts

<r​edsh4de:matrix.org> Apply this CSP and it will work fine:

<r​edsh4de:matrix.org> ```

<r​edsh4de:matrix.org> "default-src 'none'; script-src 'none'; connect-src 'self'; img-src 'self' data:; media-src 'self'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; form-action 'self'",

<r​edsh4de:matrix.org> ```

<r​edsh4de:matrix.org> 'unsafe-inline' for style-src is pretty much required for the icons to work as dynamically as they do

<p​lowsof:matrix.org> thanks, added it and pointed to your repo beta.monerodevs.org

<p​lowsof:matrix.org> onion link in the headers

<r​edsh4de:matrix.org> And we still have a A+ :D

<r​edsh4de:matrix.org> securityheaders.com/?q=+https%3A%2F…onerodevs.org%2F&followRedirects=on

Dan proxy : its..... im sorry its nginx , the built in coolify option + Nixpacks (rather than a Dockerfile like monero-docs)

<b​asses:matrix.org> cool

<b​asses:matrix.org> but you will have to re-run these tests for also the server hosting the website which will be getmonero.org

<b​asses:matrix.org> internet.nl/site/beta.monerodevs.org/3545181

security.txt .. interesting

lets see if they accept a redirect @ beta.monerodevs.org/.well-known/security.txt

<o​frnxmr:xmr.mx> It says redirects are ok

ive put an example contact email there

signed too because we are crypto peoples

the scan site may take time to load or the format is wrong : i created using securitytxt.org

same for ipv6.. added a record for it but not appearing in dig yet

bumped to 92 . adding ipv6 complains about https... will check soon, no idea

<r​edsh4de:matrix.org> rando: magnet link uses a avif icon now, and the download dropdowns have been made prettier + more consistent with the rest of the page now

<r​edsh4de:matrix.org> matrix.monero.social/_matrix/media/…matrix.org/mpYNhcohycprYrPbFgqLWeSP

<b​asses:matrix.org> menu localizable?

<b​asses:matrix.org> platforms menu localizable?

rando 100% now but its ignoring the security,txt :(

<b​asses:matrix.org> nice

ignore, i added en,Esperanto which is wrong in languages

<r​edsh4de:matrix.org> should be en, eo

thanks

<r​edsh4de:matrix.org> not yet, i'll localize non-brand words like installer, tarball, etc

<r​edsh4de:matrix.org> I put up security.txt on the github repo itself just now, so that the scanner does not complain about the mismatch of canonical and the gist source

🙏

<b​asses:matrix.org> redsh4de extrnal link icons reverted to LTR?

<b​asses:matrix.org> getmonero-redesign-impl.vercel.app/ar/downloads

<b​asses:matrix.org> all icons too

<b​asses:matrix.org> in RTL

<r​edsh4de:matrix.org> good eye, fixing

<r​edsh4de:matrix.org> pushed just now, with localization for download dropdown

<r​edsh4de:matrix.org> the vercel link will update quicker

<b​asses:matrix.org> getmonero.org/404 Diego Salazar any ideas for 404 page for news redesig? I like the simplicity and tongue of cheeck descn

<b​asses:matrix.org> getmonero.org/404 Diego Salazar any ideas for 404 page for new redesign? I like the simplicity and tongue of cheeck desc of current one

<b​asses:matrix.org> matrix.monero.social/_matrix/media/…matrix.org/OpSCILTDfXWotmKPAUtORVKU

<b​asses:matrix.org> I was thinking of making this optionally localizable

<b​asses:matrix.org> matrix.monero.social/_matrix/media/…matrix.org/TVFtZvzFOLBKvVrXlXoImsPV

<b​asses:matrix.org> would look like this for arabic

<b​asses:matrix.org> omniglot.com/language/numerals.htm

<r​edsh4de:matrix.org> can do :D

<b​asses:matrix.org> just add t(), as if we did by default, some will want to even use the "universal" numerals 123...

<b​asses:matrix.org> just add t(), as if we did localize them by default for each locale, some will want to even use the "universal" numerals 123... for their locale with theor own numerals.

<r​edsh4de:matrix.org> Won't even need t here, have something simpler in mind

<r​edsh4de:matrix.org> ```js

<r​edsh4de:matrix.org> export const localizeNumber = (

<r​edsh4de:matrix.org> number: number,

<r​edsh4de:matrix.org> locale: keyof typeof locales,

<r​edsh4de:matrix.org> minimumIntegerDigits: number = 1,

<r​edsh4de:matrix.org> ): string => {

<r​edsh4de:matrix.org> const localeString = locales[locale];

<r​edsh4de:matrix.org> return number.toLocaleString(localeString, {

<r​edsh4de:matrix.org> minimumIntegerDigits: minimumIntegerDigits,

<r​edsh4de:matrix.org> useGrouping: false,

<r​edsh4de:matrix.org> });

<r​edsh4de:matrix.org> live on page rando : getmonero-redesign-impl.vercel.app/ar

<o​frnxmr:xmr.mx> beta.monerodevs.org/.well-known/security.txt LMAO [@321bob321:monero.social](https://matrix.to/#/@321bob321:monero.social)

<3​21bob321:monero.social> Need robot.txt too ?

<o​frnxmr:xmr.mx> Did you see the contact details [@321bob321:monero.social](https://matrix.to/#/@321bob321:monero.social)

<3​21bob321:monero.social> Yeah

<o​frnxmr:xmr.mx> At least we know that is account is used

<3​21bob321:monero.social> Always monitored

<3​21bob321:monero.social> For 404 page should have something like “oops boating accident be back soon”