Removed Inline Images from Pre-built Automation README Files

Breaking Change Notice

The following is a breaking change in the 2023.2 IAP release.

Removed Image Source in CSP HTTP Response Headers [2023.2.0]

To provide an added layer of security, all inline image-src references to the Itential GitLab repository have been removed from the Pre-built Automations README files, thereby restricting embedded images from loading. Although these images will no longer be visible in the README file, alt-text tags will still render. Please refer to the examples below.

Before Breaking Change

Previously, upon browsing and opening a Pre-built from within Admin Essentials, images would display in the Pre-built README file. Figure 1 shows a visualization of a workflow.

Figure 1: Embedded Image Displays

After Breaking Change

With this breaking change, images will no longer display. The Pre-built README file will display alt-text tags instead (Figure 2).

Figure 2: Alt-Text Tag Displays

What should I do?

For the majority of IAP installs, this will have no major impact or effect. However, please test and confirm all custom applications and adapters are unaffected by the removal of these inline image-src references.

Related Reading

• CSP
• MDN CSP