I am trying to add this extension to my azure devops organization. However, when I try to install this extension and then view a repo's README I am met with the following error
`Refused to connect to 'https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.1.11&apikey=<not sure if sensitive info so hiding this for now>&upload-time=1663224261051&w=0' because it violates the following Content Security Policy directive: "connect-src ...`
I generally understand the error seems to be telling me that the extension is trying to access SOMETHING (not entirely sure what) that originates outside the accepted domains listed after the string connect-src.
I tried perusing through my organization settings to see if there was a way to modify the CSP that way to no avail. I do know that the extension itself see the github here calls upon a few scripts. For reference, I forked this repo and tried to publish it on my own with a few tweaks which were as follows:
- I changed the publisher name to my own vs extensions publisher name
- I changed references to render.js to render.ts (there is no render.js file and was getting a 404 not found for render.js before I did this)
I tried clicking on the link that was being attempted to be accessed but was met with an error stating that this route does not accept GET requests (I sort of figured this would be the case but worth a shot)
I guess my questions are as follows
- Is there a way to update the CSP for my individual org in AzDo?
- If not, is there a way to work around this pesky error?
Update
Figured I should include some of the connect-src's that AzureDevOps would accept
- .visualstudio.com
- wss://*.visualstudio.com
- https://web.vortex.data.microsoft.com
- *.dev.azure.com
Update 2
The following is the case when I leave reference to `scripts/render.js as is
GET https://baselanani.gallery.vsassets.io/_apis/public/gallery/publisher/BaselAnani/extension/markedmermaidv2/0.0.4/assetbyname/scripts/render.js net::ERR_ABORTED 404
