Mike
Implementing Content Security Policy Headers
@severfire sorry for late reply, been busy. I will send over what i created in a couple hours
@Dennis Koch is there any way to have a newer filament version where we can have access to the footer scripts? What i mean, just the ability to add nonces that that script is from a verified source. The rest i took care of. The CSP issue is a big deal but also tough to implement i know, however better having some protection than none, most of the cases it needs to just block fields that have direct script tags
38 replies
upload to s3 with thumbnails driving me nuts on filament side
@awcodes But how do i hook into the upload process, if i specify the disk as s3 im unable to create the thumbnail as it appears the file upload is still in the temporary directory and events fail
8 replies
S3 image upload not getting full url?
which the image is uploaded in s3, with the following code:
FileUpload::make('meta_image')
->label('Featured image')
->image()
->disk('s3')
->directory('images/posts')
->visibility('public')
->maxSize(2048)
->required(),
17 replies
S3 image upload not getting full url?
@Dennis Koch nope not working, on table build if i specify s3 disk for that image it works correctly but the FileUpload form will not behave the same. No cors issues, im locally developing, i think the file uploader fails to use s3 for file previews, and since the image url in the database is just the image name it never finds it. Please see images below
17 replies
S3 image upload not getting full url?
@Dennis Koch Sorry, following on this again. The thing is, isnt it supposed to append to the AWS_URL or AWS_ENDPOINT? Because this seems very counter productive. While storing the filename on db seems fine as a logical approach, im still specifying that the disk is s3, which in that case should preview the uploaded image using the s3 url declared in the env file. Correct me if wrong, as i see zero info on the net on the issue
17 replies