Please fill out the templates below to the best of your ability, based on whether your problem is with using the website or with running your own server.
Website Problem
Please confirm whether you've tried the following debugging steps:
[ x ] Clearing cache and refreshing the page (On Firefox, press Ctrl+F5. On Chrome, press F12, then right click the refresh button and click "Empty Cache and Hard Reload")
[ x ] Disabling all browser extensions
[ x ] Using a clean channel with no customizations
Description of the Problem
What triggers the problem?
missing CSP headers cause content to be blocked
What happens?
Nothing load except the bare minimum allowed in the pretty stricht default CSP for my webservers
What do you expect to happen instead?
the sync server to send appropriate CSP headers, so the default CSP will be overridden.
System Information
Operating System (Windows / Mac / Linux / Android / iOS):
w10, ubuntu server
Web Browser (Firefox / Chrome / Other):
firefox
Error Messages Displayed:
`Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). .MYDOMAIN.COM:11:1
Uncaught ReferenceError: DEFAULT_THEME is not defined
https://.MYDOMAIN.COM/js/theme.js:7
https://.MYDOMAIN.COM/js/theme.js:30
theme.js:7:15
Content Security Policy: The page’s settings blocked the loading of a resource at https://maxcdn.bootstrapcdn.com/bootstrap/3.3.1/fonts/glyphicons-halflings-regular.eot?#iefix (“font-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at https://maxcdn.bootstrapcdn.com/bootstrap/3.3.1/fonts/glyphicons-halflings-regular.woff (“font-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at https://maxcdn.bootstrapcdn.com/bootstrap/3.3.1/fonts/glyphicons-halflings-regular.ttf (“font-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at https://maxcdn.bootstrapcdn.com/bootstrap/3.3.1/fonts/glyphicons-halflings-regular.svg#glyphicons_halflingsregular (“font-src”).
Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). jquery-1.11.0.min.js:3:4153
Loading failed for the Githubissues.
Githubissues is a development platform for aggregating issues.
Please fill out the templates below to the best of your ability, based on whether your problem is with using the website or with running your own server.
Website Problem
Please confirm whether you've tried the following debugging steps:
Description of the Problem
What triggers the problem? missing CSP headers cause content to be blocked
What happens? Nothing load except the bare minimum allowed in the pretty stricht default CSP for my webservers
What do you expect to happen instead? the sync server to send appropriate CSP headers, so the default CSP will be overridden.
System Information
Operating System (Windows / Mac / Linux / Android / iOS): w10, ubuntu server
Web Browser (Firefox / Chrome / Other): firefox
Error Messages Displayed: `Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). .MYDOMAIN.COM:11:1 Uncaught ReferenceError: DEFAULT_THEME is not defined