Profile styling seemingly broken.

What it says in the title. I've heard about the worm, but what's going on here? I get disabling the script tag, but what about standard CSS? Is this intentional? Sorry, I'm a bit lost as I haven't used this site in about 2 months.

my profile CSS was literally working a couple hours ago... weird

Yeah seems like my status cafe CSS is broken...

I don't think this is intentional because my profile image is also broken, and every images is also broken, let's wait for @m15o to fix it

Last edited on 2025-06-20 23:37:01

After checking for a bit, seems like the CSP header is configured but it's configured to use `default-src: 'self'`, which will absolutely break everything. I recommend just using `script-src` and just blocking unsafe-inline there. (`script-src: 'self'`)

Using a CSP bypass extension will help but I think it needs to be fixed.

And yes, connect-src is also broken which means all images are broken.

Last edited on 2025-06-21 02:22:30

apologies -_- it should all be good now.