jquery < 1.5 is incompatible with CSP

Bug #1028259 reported by François Marier
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Libravatar (obsolete)
Fix Released
Medium
François Marier

Bug Description

The version of jquery that's in squeeze (1.4.2) is incompatible with CSP:

  http://bugs.jquery.com/ticket/7371

and causes a warning like this one to show up in the Firebug console:

  CSP: Directive "inline script base restriction" violated
  window.script1343108620099=1;

Thankfully, squeeze-backports has jquery 1.6.4 and so we should bump the required version to 1.5 to force this.

(Found this solution on https://bugzilla.mozilla.org/show_bug.cgi?id=630882.)

Tags: csp wheezy
Changed in libravatar:
status: Confirmed → Fix Committed
description: updated
Changed in libravatar:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.