Skip to content

Instantly share code, notes, and snippets.

@Pysis868
Last active January 26, 2022 21:07
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Pysis868/8675ce2af36b7a5b23892f031c21011f to your computer and use it in GitHub Desktop.
Save Pysis868/8675ce2af36b7a5b23892f031c21011f to your computer and use it in GitHub Desktop.
Discord Server Icon and other content loading problem

Checked out these links, tried the instructions.

Just tried that for Mac by quitting the program, deleting the "$HOME/Library/Application Support" and "$HOME/Library/Cache" discord folders, reinstalled the osx package, restarted, logged in, and have even less icons that I did before, even after further restarts.

This has been happening for several weeks now at least, on several computers, in different locations, without any special firewall software or network proxies.

My Android mobile app's icons seems to work fine.

I have a good internet connection, bandwidth, and latency.

Since finding the Github link, I've investigated more.

Several, but not all resources, have an issue.

Several https://cdn.discordapp.com/avatars/.../....png?size=128 and https://cdn.discordapp.com/icons/.../....webp show as "(canceled)" strangely.

Then https://cdn.discordapp.com.x.....id.opendns.com/s/cdn.discordapp.com/avatars/.../....png?X-OpenDNS-Session=_..._size=128 are blocked by CSP.

I checked the main document, server channel example https://discordapp.com/channels/.../..., and found this CSP:

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.discordapp.com/animations/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://js.stripe.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://checkout.paypal.com 'nonce-MTgyLDE5MywyMiwxNzUsMjAzLDE1NCwyMSwyMTk='; style-src 'self' 'unsafe-inline' https://cdn.discordapp.com; img-src 'self' data: https://.discordapp.net https://.discordapp.com https://i.scdn.co https://i.ytimg.com https://i.imgur.com https://.gyfcat.com https://media.tenor.co https://.youtube.com https://.giphy.com https://static-cdn.jtvnw.net https://pbs.twimg.com https://assets.braintreegateway.com https://checkout.paypal.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://status.discordapp.com https://discordapp.com https://cdn.discordapp.com https://router.discordapp.net wss://.discord.gg wss://.discord.media wss://dealer.spotify.com https://api.spotify.com https://support.discordapp.com https://sentry.io https://api.twitch.tv https://api.stripe.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://origin-analytics-prod.production.braintree-api.com https://payments.braintree-api.com ws://127.0.0.1: http://127.0.0.1:; media-src 'self' blob: https://.discordapp.net https://.discordapp.com https://.youtube.com https://streamable.com https://vid.me https://.gfycat.com https://twitter.com https://oddshot.akamaized.net https://.giphy.com https://i.imgur.com https://media.tenor.co; frame-src 'self' https://.youtube.com https://.twitch.tv https://open.spotify.com https://w.soundcloud.com https://sketchfab.com https://player.vimeo.com https://twitter.com https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://js.stripe.com https://assets.braintreegateway.com https://checkout.paypal.com; child-src 'self' https://assets.braintreegateway.com https://checkout.paypal.com;

Seems the OpenDNS issue is because that domain is not added to the CSP. Not sure about the canceled requests.

I can successfully retrieve these resources in my normal web browser as a simple GET request from a new tab.

Mac 10.13.6

Discord 0.0.251

Unrelated:

Auto-removed Reddit post: https://www.reddit.com/r/discordapp/comments/9x308m/some_server_icons_emoticonsemojis_profile_picture/

@crswll
Copy link

crswll commented Nov 16, 2021

Experiencing this now. Did you ever get it resolved? I have a feeling it's to do with some work security things.

@Pysis868
Copy link
Author

Probably using a local secure DNS would bypass their control introducing this redirection.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment