Not a bug jquery with safari/ios

[briansol]

Affected version

2.2

I can't reproduce this, but several members have said that phrases aren't parsing from the jquery extend code on IOS with both safari and FF

they are seeing 'yesterday at x' instead of the converted phrase.
SS below.

jQuery.extend(XF.phrases, {
			// 
			date_x_at_time_y: "{date} at {time}",
			day_x_at_time_y:  "{day} at {time}",
			yesterday_at_x:   "Yesterday at {time}",
			x_minutes_ago:    "{minutes} minutes ago",
			one_minute_ago:   "1 minute ago",
			a_moment_ago:     "A moment ago",
			today_at_x:       "Today at {time}",
			in_a_moment:      "In a moment",
			in_a_minute:      "In a minute",
			in_x_minutes:     "In {minutes} minutes",
			later_today_at_x: "Later today at {time}",
			tomorrow_at_x:    "Tomorrow at {time}",

it also doesn't make sense at all that in the new post list, the time would reflect 'tomorrow'. surely, a post must have been made in the past....

this could be a user setting? bad time on their device? i'm not really sure as i haven't been able to reproduce it but multiple people have PM'ed me about it so it must be system-related (all ios users)

 

[briansol]

scratch this. It was related to a too strict content-security policy header.

 

[drastic]

How did you fix this?

 

[briansol]

I removed the CSP. it's an impossible to maintain whitelist if you serve ads that also have js behind them (eg, doubleclick)

Content Security Policy (CSP) - HTTP | MDN

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft, to site defacement, to malware distribution.

developer.mozilla.org