I’m running a self-hosted instance of Discourse at forum.embeetle.com . It has been running well for multiple years now. This morning, I noticed that all keyboard and mouse interaction with the forum in the browser stopped working. I can load any page from the forum, but I cannot scroll, login, sea…

Found it: it was indeed an issue with my nginx configuration that now accidentally emitted a Content-Security-Policy header that is too strict for Discourse. Removing the Content-Security-Policy fixed my issue.

It seems your site works fine in safe mode with themes disabeled.

You are right. I don’t remember ever setting a theme by default, but maybe I did and forgot about it. I’d like to temporarily disable themes by default, so that our forum is usable while we figure out what is wrong with themes. How can I do that, if I can only access the admin pages with themes …

Strange, for me in Safari, it’s reporting that it refuses to execute line 315. Which is the inline script for the Discourse-spash preloader. So not theme related. [Screenshot 2023-11-06 at 14.22.53] For an immediate fix, you could disable CSP using a site-setting: [Screenshot 2023-11-06 at 14.24…

[صورة] Bas van Leeuwen: Strange, for me in Safari, it’s reporting that it refuses to execute line 315. Which is the inline script for the Discourse-spash preloader. So not theme related. Yes, that is exactly what is happening for me. I’ve implemented a different work-around for now, by add…

These are the plugins I am using: [image] chat was already disabled. I tried disabling discourse-math, footnote and spoiler-alert; the problem persists.

تعطلت لوحة المفاتيح والفأرة + خطأ content-security-policy

الدعم تثبيت

ygramoel (Johan Cockx) 6 نوفمبر 2023، 1:56م 6

هذه هي المكونات الإضافية التي أستخدمها:

تم تعطيل chat بالفعل.

حاولت تعطيل discourse-math و footnote و spoiler-alert؛ لا تزال المشكلة قائمة.

الموضوع		الردود	مرات العرض
External nginx pagespeed module causes Security Policy violation Self-hosting	12	1982	30 يونيو 2019
Nginx as reverse proxy and Content Security Policy issue Self-hosting nginx	7	3058	19 أغسطس 2024
Topic Preview Broken (due to Google PageSpeed Module) Support	14	2364	31 أغسطس 2017
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25685	13 يونيو 2023
Front page of discourse missing content Self-hosting	6	2658	20 ديسمبر 2016

تعطلت لوحة المفاتيح والفأرة + خطأ content-security-policy

الموضوعات ذات الصلة