Cannot load image from atlassian.net even though csp policy is set

Hello everyone,

I have been trying to get the Issue priority icons (e.g https://[MY-DOMAIN].atlassian.net/images/icons/priorities/medium.svg).
For this i added the following to my manifest yml:

permissions:
  scopes:
    - write:jira-work
    - read:jira-work
    - storage:app
  content:
    styles:
      - 'unsafe-inline'
  external:
    images:
      - 'https://i1.wp.com'
      - '*.atlassian.net'

But when running the app i still get the following error:
Refused to load the image ‘icon/16px/medium-priority’ because it violates the following Content Security Policy directive: “img-src ‘self’ data: blob: https://secure.gravatar.com https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net https://api.atlassian.com https://i1.wp.com”.

The images source which i have added in the manifest (‘*.atlassian.net’) does not work. According to this resource it should work like this
https://developer.atlassian.com/platform/forge/add-content-security-and-egress-controls/

How can I fix this issue ?

Thanks in advance

Best regards,
Mathias

1 Like

@MathiasHausleithner,
Did you manage to get the ‘*.atlassian.net’ working? I get a CSP error