svn commit: r1928534 - in apr/site/trunk: docs docs/coverage xdocs/stylesheets

[email protected]
Newsgroups gmane.comp.apache.apr.cvs
Message-ID <175809823123.2904719.14279578263409497601@svn02-us-east.apache.org> 
Author: brane
Date: Wed Sep 17 08:37:10 2025
New Revision: 1928534

Log:
Clean up after testing the CSP header. It's in .htaccess now and we
load the web fonts in the HTML files instead of the stylesheet.

Modified:
   apr/site/trunk/docs/.htaccess
   apr/site/trunk/docs/anonsvn.html
   apr/site/trunk/docs/compiling_unix.html
   apr/site/trunk/docs/compiling_win32.html
   apr/site/trunk/docs/coverage/index.html
   apr/site/trunk/docs/download.html
   apr/site/trunk/docs/guidelines.html
   apr/site/trunk/docs/index.html
   apr/site/trunk/docs/mailing-lists.html
   apr/site/trunk/docs/patches.html
   apr/site/trunk/docs/projects.html
   apr/site/trunk/docs/security_report.html
   apr/site/trunk/docs/style.css
   apr/site/trunk/docs/versioning.html
   apr/site/trunk/xdocs/stylesheets/site.vsl

Modified: apr/site/trunk/docs/.htaccess
==============================================================================
--- apr/site/trunk/docs/.htaccess	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/.htaccess	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,4 +1,4 @@
-# Borrowed from Subverison's site 
+# Borrowed from Subverison's site
 Options +Includes
 AddOutputFilter INCLUDES .html
 
@@ -6,4 +6,5 @@ RewriteEngine On
 
 RewriteRule ^/?download(\.html)?/?$ /download.cgi [PT]
 
+# Replace the CSP header to allow loading Google's web fonts.
 Header set Content-Security-Policy "default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/  ; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/  ; style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ https://fonts.googleapis.com/; frame-ancestors 'self'; frame-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https:/
 /apache.org/ https://*.scarf.sh/; worker-src 'self' data: blob:; font-src https://fonts.gstatic.com/"

Modified: apr/site/trunk/docs/anonsvn.html
==============================================================================
--- apr/site/trunk/docs/anonsvn.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/anonsvn.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/compiling_unix.html
==============================================================================
--- apr/site/trunk/docs/compiling_unix.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/compiling_unix.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/compiling_win32.html
==============================================================================
--- apr/site/trunk/docs/compiling_win32.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/compiling_win32.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/coverage/index.html
==============================================================================
--- apr/site/trunk/docs/coverage/index.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/coverage/index.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/download.html
==============================================================================
--- apr/site/trunk/docs/download.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/download.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/guidelines.html
==============================================================================
--- apr/site/trunk/docs/guidelines.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/guidelines.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/index.html
==============================================================================
--- apr/site/trunk/docs/index.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/index.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/mailing-lists.html
==============================================================================
--- apr/site/trunk/docs/mailing-lists.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/mailing-lists.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/patches.html
==============================================================================
--- apr/site/trunk/docs/patches.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/patches.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/projects.html
==============================================================================
--- apr/site/trunk/docs/projects.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/projects.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/security_report.html
==============================================================================
--- apr/site/trunk/docs/security_report.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/security_report.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/docs/style.css
==============================================================================
--- apr/site/trunk/docs/style.css	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/style.css	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,3 @@
-/*
-Doesn't work in Safari and mobile browsers :(
-@import url('https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap');
-@import url('https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&display=swap');
-*/
-
 :root {
   /* Colors */
   --apr-bg: #ffffff;

Modified: apr/site/trunk/docs/versioning.html
==============================================================================
--- apr/site/trunk/docs/versioning.html	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/docs/versioning.html	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -1,9 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">

Modified: apr/site/trunk/xdocs/stylesheets/site.vsl
==============================================================================
--- apr/site/trunk/xdocs/stylesheets/site.vsl	Wed Sep 17 08:30:17 2025	(r1928533)
+++ apr/site/trunk/xdocs/stylesheets/site.vsl	Wed Sep 17 08:37:10 2025	(r1928534)
@@ -86,9 +86,6 @@ href="$title.getAttributeValue("href")">
 #macro ( document )
 <html lang="en">
  <head>
-  <!-- Some browsers (I'm looking at you, Safari) are too paranoid to download web fonts. -->
-  <meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline' fonts.googleapis.com">
-  <meta http-equiv="Content-Security-Policy" content="font-src fonts.gstatic.com">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap">
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.