Style in `asciidoc.preview.style` can't be loaded about asciidoctor-vscode

[Mutantpenguin]

Could you please try ./RegeIn/style/html-theme.css

I did so and it doesn't work and gives the same error message.

Even when I place the file directly in my workspace root so I don't need to use \, \\ or / I get the same error message.

[ggrossetie]

I was able to reproduce it. It's not a path issue it's a Content Security Policy

index.html:1 Refused to load the stylesheet 'https://fonts.googleapis.com/css?family=Nova+Round' because it violates the following Content Security Policy directive: "style-src 'self' 'self' https://*.vscode-cdn.net 'unsafe-inline' data:". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.

index.html:1 Refused to load the stylesheet 'https://fonts.googleapis.com/css?family=Noto+Sans:300,600italic,400,400italic,600,600italic%7CNoto+Serif:400,400italic,700,700italic%7CDroid+Sans+Mono:400,700' because it violates the following Content Security Policy directive: "style-src 'self' 'self' https://*.vscode-cdn.net 'unsafe-inline' data:". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.

index.html:1 Refused to load the stylesheet 'https://cdn.jsdelivr.net/gh/asciidoctor/[email protected]/data/stylesheets/asciidoctor-default.css' because it violates the following Content Security Policy directive: "style-src 'self' 'self' https://*.vscode-cdn.net 'unsafe-inline' data:". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.

You can workaround this issue by disabling the CSP.

[ggrossetie]

We probably need to add https: in style-src and script-src:

asciidoctor-vscode/src/asciidoctorWebViewConverter.ts

Lines 67 to 75 in 2a145bf

	const rules = {
	'default-src': ['\'none\''],
	'img-src': ['\'self\'', rule, 'https:', 'data:', krokiServerUrl],
	'object-src': ['\'self\'', rule, 'https:', 'data:', krokiServerUrl],
	'media-src': ['\'self\'', rule, 'https:', 'data:', krokiServerUrl],
	'script-src': [`'nonce-${nonce}'`, `'${highlightjsInlineScriptHash}'`, 'https://*.vscode-cdn.net/'],
	'style-src': ['\'self\'', rule, '\'unsafe-inline\'', 'data:'],
	'font-src': ['\'self\'', rule, 'https:', 'data:', 'about:'],
	}

[ggrossetie]

Could you please try ./RegeIn/style/html-theme.css

[cunka]

Just to confirm its not isolated - I have had the same issue with asciidoc.preview.style as Mutantpenguin and get the same error message - albeit, I am using my own custom stylesheet and not the one Mutantpenguin is using.

It was working, and working well.

[ggrossetie]

I can't see what changed between 3.1.5 and 3.1.7 🤔
@cunka could you please share your error message? maybe I can find a pattern... are you on Windows? do you use \\? did you try to replace \\ by / (since it's a URI and not a file path)

[cunka]

Yes - I'm a WINDOWS 10 user.
Had the paths set up as \ - as per this other bug i mentioned. https://github.com/asciidoctor/asciidoctor-vscode/issues/777#issuecomment-1676297112

It was working and I could use the webview to edit/modify the stylesheet all in VSCode and then it stopped working.
Outside of the VSCode updates, I'm wondering if something was enforced by Microsoft in a recent OS update.

I'm glad you have found a solution.