I’m running a self-hosted instance of Discourse at forum.embeetle.com . It has been running well for multiple years now. This morning, I noticed that all keyboard and mouse interaction with the forum in the browser stopped working. I can load any page from the forum, but I cannot scroll, login, sea…

Found it: it was indeed an issue with my nginx configuration that now accidentally emitted a Content-Security-Policy header that is too strict for Discourse. Removing the Content-Security-Policy fixed my issue.

It seems your site works fine in safe mode with themes disabeled.

You are right. I don’t remember ever setting a theme by default, but maybe I did and forgot about it. I’d like to temporarily disable themes by default, so that our forum is usable while we figure out what is wrong with themes. How can I do that, if I can only access the admin pages with themes …

Strange, for me in Safari, it’s reporting that it refuses to execute line 315. Which is the inline script for the Discourse-spash preloader. So not theme related. [Screenshot 2023-11-06 at 14.22.53] For an immediate fix, you could disable CSP using a site-setting: [Screenshot 2023-11-06 at 14.24…

[imagem] Bas van Leeuwen: Strange, for me in Safari, it’s reporting that it refuses to execute line 315. Which is the inline script for the Discourse-spash preloader. So not theme related. Yes, that is exactly what is happening for me. I’ve implemented a different work-around for now, by a…

These are the plugins I am using: [image] chat was already disabled. I tried disabling discourse-math, footnote and spoiler-alert; the problem persists.

Teclado e mouse pararam de funcionar + erro de content-security-policy

Suporte Instalação

Moin Novembro 6, 2023, 11:25am 2

Parece que seu site funciona bem no modo de segurança com os temas desativados.

Tópico		Respostas	Visualizações
External nginx pagespeed module causes Security Policy violation Self-hosting	12	1917	30 de Junho de 2019
Nginx as reverse proxy and Content Security Policy issue Self-hosting nginx	7	2860	19 de Agosto de 2024
Topic Preview Broken (due to Google PageSpeed Module) Support	14	2256	31 de Agosto de 2017
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25177	13 de Junho de 2023
Front page of discourse missing content Self-hosting	6	2596	20 de Dezembro de 2016

Teclado e mouse pararam de funcionar + erro de content-security-policy

Tópicos relacionados