UNSOLVED electron security warning issue
My problem is I cannot read content of newsfeed article on the magic mirror display. Some content briefly flashes on screen, then nothing but the errors as described below.
Whenever I send the ‘newsfeed’ module the ‘ARTICLE_MORE_DETAILS’ command two or more times, I get the following error…"Refused to frame ‘https://www.cnn.com/’ Because an ancestor violates the following Content Security Policy directive: "frame-ancestors ‘self’ https://.cnn.com:"…etc
I see this error when I run the npm run start:dev command.
Also, please note I am seeing a warning message as soon as I start the magic mirror display. The warning message says: “Electron Security Warning (Insecure Content-Security-Policy) This render process has either no Content Security. Policy set or a policy with “unsafe-eval” enabled. This exposes uses of this app to unnecessary security risks.”
I am attempting to access article content from the following RSS feed: “http://rss.cnn.com/rss/cnn_topstories.rss”
Any help to resolve this issue is appreciated!
@stevencarp102 I can’t answer the question, but the security warning is nothing we can do anything about, and doesn’t impact execution
@stevencarp102 are you using the default newsfeed module of something else?
@sdetweil Yes, I am using the default newfeed module. I don’t mind having the security warning, but I thought there seems to be a connection to the error that occurs when the software tries to execute the 'ARTICLE_MORE_DETAILS’ command.
Do you have an RSS feeds URL that you know works when trying to bring up the whole article on the screen with this command?
@sdetweil also, do you have an example config.js perhaps in which the “view more details of the article” feature works?
FYI, I am using the “Up” gesture with the MMM-GroveGestures module to indicate when the ‘ARTICLE_MORE_DETAILS’ command is sent to the default newsfeed module.
Thanks for your help by the way!
@stevencarp102 I do not. have never tried that, don’t know how it’s supposed to work.
how did u send the notification?
@stevencarp102 I would open an issue on the MagicMirror gitHub issues page
I know they were working on a couple content security issues for next release ( Jan 1)