ArneVogel / listudy

Listudy - chess training server
https://listudy.org
GNU Affero General Public License v3.0
290 stars 44 forks source link

Blind tactics page reloads frequently, safari #94

Closed marcusbuffett closed 2 years ago

marcusbuffett commented 2 years ago

On safari mobile and safari on OS X 12, I'm getting frequent reloads of the page. Tried looking at the console but can't see anything obvious. There is this:

[Error] Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy. (260, line 0)
[Error] Refused to connect to wss://listudy.org/live/websocket?_csrf_token=FjFAElcPGzsLTjo2OxR6NEBRQCFLSxwLWKxJ-EVQm-HnIg9ws9yDzsts&_mounts=0&vsn=2.0.0 because it does not appear in the connect-src directive of the Content Security Policy.
[Error] SecurityError: The operation is insecure.
    (anonymous function) (live_view-088d0748d58b97f80cbe91b57f1b4bfc.js:1:15113)
    value (live_view-088d0748d58b97f80cbe91b57f1b4bfc.js:1:15113)
    t (live_view-088d0748d58b97f80cbe91b57f1b4bfc.js:1:48551)

Maybe because it can't connect to the websocket, live view later decides the best way to get things back in order is to refresh? Just random spitballing, I know nothing about live view

ArneVogel commented 2 years ago

I don't have any apple device to reproduce. I added {ws/wss}://listudy.org to the csp (before it had a port attached) so the websocket should be in the csp now. Can you check again?

marcusbuffett commented 2 years ago

That was quick! Error is gone and page isn't reloading any more, thank you