Markdown preview not working #296

Activity

1. nmarcopo

   added

   bugSomething isn't workingSomething isn't working

   on Mar 19, 2019
2. kylecarbs commented on Mar 19, 2019

   

   kylecarbs

   on Mar 19, 2019

   Member

   More actions

   Will fix!

   🎉React with 🎉13Reacted by Nicholas Marcopoli, YONEDA Yūki, Ben Coleman, Yogi, Richard McSorley, Cubee, Aaron Nall, Loong, Bryan Opfer, make0x0 and 3 more
3. kylecarbs

   added this to the April 2019 milestone on Apr 8, 2019
4. code-asher

   self-assigned this

   on Apr 8, 2019
5. code-asher

   closed this as completedin #472on Apr 16, 2019
6. ViRb3 commented on Mar 11, 2020

   

   ViRb3

   on Mar 11, 2020

   More actions

   Markdown preview does not seem to work on latest release (2.1698-vsc1.41.1). There are no errors, but the preview window is empty.

   👍React with 👍2Reacted by happygod-lyc and Timo Friedl
7. ViRb3 commented on Mar 11, 2020

   

   ViRb3

   on Mar 11, 2020

   More actions

   @code-asher
8. ViRb3 commented on Mar 11, 2020

   

   ViRb3

   on Mar 11, 2020

   More actions

   Seems to be an IFRAME security issue. By opening the browser debugging tools,

   On Firefox:

   Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://v1.extapi.coder.com/extensionquery. (Reason: CORS header 'Access-Control-Allow-Origin' missing).
   Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://v1.extapi.coder.com/extensionquery. (Reason: CORS request did not succeed).
   Load denied by X-Frame-Options: “DENY” from “https://<redacted>.com/webview/index.html?id=<redacted>”, site does not permit any framing. Attempted to load into “https://<redacted>.com/?folder=vscode-remote%3A%2F%2Fcode-server%3A8080%2F<redacted>”.
   

   On Chrome:

   Refused to display 'https://<redacted>.com/webview/index.html?id=<redacted>' in a frame because it set 'X-Frame-Options' to 'deny'.
   
9. nhooyr commented on Mar 11, 2020

   

   nhooyr

   on Mar 11, 2020

   Contributor

   More actions

   Opened #1409 for you @ViRb3
10. ViRb3 commented on Mar 12, 2020

    

    ViRb3

    on Mar 12, 2020

    More actions

    Apologies, the problem was in an inherited nginx config:

    # XSS
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";

    Everything works after I cleared those headers.