Log in
Log into community
Share feedback, ideas and get community help
View all posts
Related posts
Did this answer your question?
😞
😐
😃
Powered by
Hall
Inactive
Updated 7 months ago
0
Follow
Bugs (avatar upload and CORS)
Bugs (avatar upload and CORS)
Inactive
0
Follow
T
Tao Wang
7 months ago
·
There are two bugs:
The allowed origin is not working. I can still embed the chatbot on other domains and chat with it.
The image upload is not working. I can not upload Bot Avatar via file upload. I have to server my image via jsdelivr and insert the link.
B
T
20 comments
Share
Open in Discord
B
Baptiste
7 months ago
Image upload is working fine on my end! Can you record a video?
B
Baptiste
7 months ago
Can you provide an example of a site that has a bot which should not be able to start?
T
Tao Wang
7 months ago
https://typebot.co/open-ai-assistant-chat-wifj1zz
T
Tao Wang
7 months ago
Attachment
T
Tao Wang
7 months ago
Attachment
T
Tao Wang
7 months ago
it shouldn't appear on w3school because i specified
https://skillup.day
as allowed domain
T
Tao Wang
7 months ago
Attachment
T
Tao Wang
7 months ago
image upload is working now.
B
Baptiste
7 months ago
Oh right
B
Baptiste
7 months ago
That's because you are embedding using an iframe here
B
Baptiste
7 months ago
So the request origin is typebot.co which is allowed
B
Baptiste
7 months ago
I wonder if I can prevent iframe embedding as well 🤔
B
Baptiste
7 months ago
Indeed, if embedded iframe’s origin is the same as the API’s origin, requests won't be blocked due to CORS
B
Baptiste
7 months ago
So the allowed origins mechanism work only if you try to embed the bot with the embed library (not iframe)
B
Baptiste
7 months ago
I can add a mechanism to disallow this 🙂
B
Baptiste
7 months ago
Thanks for reporting this!
T
Tao Wang
7 months ago
Content Security Policy: frame-ancestors example.com;
This cloud solve it.
B
Baptiste
7 months ago
It will be hard to enforce all this from the server. The best I can do for now is to do client-side check on origins
B
Baptiste
7 months ago
https://github.com/baptisteArno/typebot.io/issues/1518
B
Baptiste
7 months ago
Will deploy that next monday 👍
Add a reply
Sign up and join the conversation on Discord
Join on Discord