+ Add Question

Use Todoist Anywhere on sites with Content Security Policy (CSP)

JB

Hello,

I recently switched from GMail to fastmail, where there is a CSP in effect. This prevents Todoist Anywhere's javascript from loading. I already contacted the fastmail-Support, but they can't do anything about it.

Could you make Todoist Anywhere work on sites with a CSP? Facebook is another popular site that uses it and the number will propably be increasing in the next time.

Thank,
Jan Bader

All responses

Clyde Romo staff
Replied on Jul 31, 2014 - 09:30

Hi Jan,

Which browser are you using? If you're using Chrome, have you tried playing with our extension? Do you get the same problem?


Regards,
Clyde

JB
Jan Bader premium
Replied on Jul 31, 2014 - 10:52

I just tried to modify your GMail-Extension to work with Fastmail but get the message:
Refused to frame 'https://gmail.todoist.com/app?mini=1' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'frame-src' was not explicitly set, so 'default-src' is used as a fallback.

I tried adding
"content_security_policy": "frame-src 'self' https://todoist.com; script-src 'self'; object-src 'self';",
(and various other strings) to the manifest, but that didn't change anything.

The only solution seems to be described here:
http://stackoverflow.com/questions/15628084/access-iframe-url-from-chrome-extension

But that seems overly complex to me.

David Trey staff
Replied on Jul 31, 2014 - 12:57

Hello Jan,

You've mentioned the Gmail extension, but could you please also try the general browser extension Clyde was referring to?

For Chrome, that's https://todoist.com/chrome and for Firefox it's https://todoist.com/firefox


Regards,
David

JB
Jan Bader premium
Replied on Jul 31, 2014 - 15:20

Sure, the general Extension works. But that's not really comparable to Todoist Anywhere and the GMail Extension.

David Trey staff
Replied on Jul 31, 2014 - 16:40

Jan,

The general extension has the exact same functionality as the others with the only difference that Todoist Anywhere can be used in any other browser than Chrome and Firefox while the general extension and the Gmail extension can only work on Chrome and Firefox.

That said, please tell us - what browser are you using?


Regards,
David

JB
Jan Bader premium
Replied on Aug 01, 2014 - 18:22

Hello David,

I'm using Chrome 36.

The general extension is not comparable IMO since it can't show Todoist _in_ a specific tab. It only show's on demand and disappears as soon as I click anywhere outside of it's window.

(I know I can undock it, but that's neither as useful)

Thanks,
Jan

JB
Jan Bader premium
Replied on Aug 10, 2014 - 12:03

Any progress on this?

Brendon Wadey staff
Replied on Aug 10, 2014 - 16:55

Jan,

There has been no progress on this. Actually, we have recently removed Todoist Anywhere from the main site, as there is a very low usage.


Regards,
Brendon