You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudberry.apache.org by "tuhaihe (via GitHub)" <gi...@apache.org> on 2026/10/04 12:02:19 UTC
[PR] Fix kapa.ai widget blocked by the ASF default CSP [cloudberry-site]
tuhaihe opened a new pull request, #405:
URL: https://github.com/apache/cloudberry-site/pull/405
The kapa.ai "Ask AI" widget never shows up on cloudberry.apache.org. ASF infra serves every *.apache.org site with a default Content-Security-Policy whose script-src only allows *.apache.org and a few other hosts, so the browser refuses to load
https://widget.kapa.ai/kapa-widget.bundle.js. The local dev server sends no CSP, which is why it worked there.
Add static/.htaccess to override the policy, the same way the Apache Doris website does. It keeps the ASF default sources except the Scarf host, which this site does not use, and adds what the widget needs:
- script-src: widget.kapa.ai and hCaptcha
- connect-src: proxy.kapa.ai, metrics.kapa.ai, Kapa's Cloud Run proxy and hCaptcha
- style-src and frame-src: hCaptcha
Docusaurus copies static/.htaccess into build/, so it is published to asf-site with the rest of the site.
See: Issue#401 <https://github.com/apache/cloudberry-site/issues/401>
Assisted-by: Claude Code
<!--Thank you for contributing! -->
<!--In case of an existing issue or discussions, please reference it-->
closes: #ISSUE_Number
<!--Remove this section if no corresponding issue.-->
---
## Change logs
> Describe your change clearly, including what problem is being solved or what document is being added or updated.
## Contributor's checklist
Here are some reminders before you submit your pull request:
* Make sure that your Pull Request has a clear title and commit message. You can take the [Git commit template](https://github.com/apache/cloudberry/blob/main/.gitmessage) as a reference.
* Learn the [code contribution](https://cloudberry.apache.org/contribute/code) and [doc contribution](https://cloudberry.apache.org/contribute/doc) guides for better collaboration.
* Make sure that your changes deployment preview is successful.
* List your communications in the [GitHub Issues](https://github.com/apache/cloudberry-site/issues) or [Discussions](https://github.com/apache/cloudberry/discussions) (if has or needed).
* Feel free to ask for the [cloudberry committers](https://github.com/orgs/apache/teams/cloudberry-committers) or other people to help review and approve.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudberry.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cloudberry.apache.org
For additional commands, e-mail: commits-help@cloudberry.apache.org
Re: [PR] Fix kapa.ai widget blocked by the ASF default CSP [cloudberry-site]
Posted by "tuhaihe (via GitHub)" <gi...@apache.org>.
tuhaihe merged PR #405:
URL: https://github.com/apache/cloudberry-site/pull/405
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudberry.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cloudberry.apache.org
For additional commands, e-mail: commits-help@cloudberry.apache.org