The discussion revolves around an issue with a Discourse site not loading properly on Safari 14, particularly in Invisible Mode. Jamie_Liu1 initially reported the issue, providing screenshots of the site’s rendering in normal and Invisible Mode. codinghorror suggested trying Discourse Safe Mode, but Jamie_Liu1 reported that it didn’t work.
Falco asked for the browser error console logs, and NoahGreat confirmed the issue, suspecting a problem with Safari 14’s update. However, pmusaraj reported that the site loaded fine on Safari 14 for them.
Wojtekxtx found that the issue wasn’t limited to Safari 14, as it also occurred on Brave. Finally, Falco identified the root cause as a misconfigured Content Security Policy (CSP), which blocked the loading of a resource. The error message indicated that the page’s settings blocked the loading of a script due to a “script-src” issue.
Content Security Policy: The page’s settings blocked the loading of a resource at https://discuss.nebula-graph.com.cn/brotli_asset/application-162a118d174ff0a09cdf2b536ac3ec1d0c0c50256a981d045ffdf5f73e3e94ba.js (“script-src”).
