Skip to content

Preview CSP error #9251

@retonom

Description

@retonom

Trying to play the preview on this toot: https://smusi.ch/web/statuses/101044028778460785
I get

Blocked by Content Security Policy
An error occurred during a connection to smusi.ch.
Firefox prevented this page from loading in this way because the page has a content security policy that disallows it.

The console says:

Content Security Policy: The page’s settings blocked the loading of a resource at https://smusi.ch/web/statuses/101044028778460785 (“frame-ancestors”).
Failed to load ‘https://smusi.ch/web/statuses/101044028778460785?autoplay=1&auto_play=1’. A ServiceWorker intercepted the request and encountered an unexpected error. sw.js:3:18845

Masto is v2.6.1, same issue also in other browsers other than FF 63.0.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions