Not a bug jquery with safari/ios

[briansol]

Affected version

2.2

I can't reproduce this, but several members have said that phrases aren't parsing from the jquery extend code on IOS with both safari and FF

they are seeing 'yesterday at x' instead of the converted phrase.
SS below.

jQuery.extend(XF.phrases, {
			// 
			date_x_at_time_y: "{date} at {time}",
			day_x_at_time_y:  "{day} at {time}",
			yesterday_at_x:   "Yesterday at {time}",
			x_minutes_ago:    "{minutes} minutes ago",
			one_minute_ago:   "1 minute ago",
			a_moment_ago:     "A moment ago",
			today_at_x:       "Today at {time}",
			in_a_moment:      "In a moment",
			in_a_minute:      "In a minute",
			in_x_minutes:     "In {minutes} minutes",
			later_today_at_x: "Later today at {time}",
			tomorrow_at_x:    "Tomorrow at {time}",

it also doesn't make sense at all that in the new post list, the time would reflect 'tomorrow'. surely, a post must have been made in the past....

this could be a user setting? bad time on their device? i'm not really sure as i haven't been able to reproduce it but multiple people have PM'ed me about it so it must be system-related (all ios users)

 

[briansol]

scratch this. It was related to a too strict content-security policy header.

 

[drastic]

How did you fix this?

 

[briansol]

I removed the CSP. it's an impossible to maintain whitelist if you serve ads that also have js behind them (eg, doubleclick)

Content Security Policy (CSP) - HTTP | MDN

Content Security Policy (CSP) is a feature that helps to prevent or minimize the risk of certain types of security threats. It consists of a series of instructions from a website to a browser, which instruct the browser to place restrictions on the things that the code comprising the site is...

developer.mozilla.org