Skip to content

Content Security Policy Headers and multiple trusted_domains #5873

Description

@awlx

Hi everybody,

I got some complains of users that Nextcloud is not working anymore as in showing a blank page or not being able to login anymore.

I inspected the issue and saw, that Chrome forbids some content because of CSP violation. It happens for every trusted_domain except the "0" domain. Because background images and .js scripts seem to get delivered from the first domain in the array and thus are blocked.

It's nearly the same issue as here #4840 only that no Cloudflare is involved just more than one domain name.

http://i.imgur.com/iuWeGmC.png

Maybe it's a new bug?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions