Open ampprojectbot opened 3 years ago
/cc @samouri was there an update to mobile chrome or permissions for web workers or something? This CSP error started appearing yesterday across a few domains, and across all release channels. It's a small # of referrers what I can tell, not sure if it's one source that own a few sites or a wider issue
There's nothing that we can do about this. These are origin pages that are setting a Content-Security-Policy
with script-src
that are not including blob:
. The page that I found is setting script-src 'unsafe-inline' 'unsafe-eval' *;
, and *
doesn't cover blob:
(it covers hosts, not schemes).
Perhaps we should enhance the guidance on the Page Experience tool to detect broken CSP values for AMP documents?
What do you think @sebastianbenz?
Details
Error report: link First seen: Jan 3, 2018 Frequency: ~ 5,306/day
Stacktrace
Notes
@rsimha
modifiedsrc/web-worker/amp-worker.js:113-120
in #21212 (May 16, 2019)Seen in:
/cc @ampproject/release-on-duty