Comments (4)
The error you're encountering is due to the Content Security Policy (CSP) blocking the execution of an inline script because of the directive default-src 'self'
. To address this issue in your next.config.js
, you might have tried to allow inline scripts, but if the problem persists, consider the following steps:
-
Ensure Correct CSP Configuration: Double-check that the CSP header is correctly configured to include
'unsafe-inline'
in thescript-src
directive. This should be done in yournext.config.js
file. -
Inspect Response Headers: Use your browser's developer tools to inspect the response headers and verify that the CSP header is being sent correctly with each request.
-
Check for Conflicting Policies: Look for any other meta tags, headers, or configurations that might be setting a conflicting CSP.
-
Use Hashes or Nonces: As a more secure alternative, consider specifying the hash or nonce of the inline script in the
script-src
directive. This involves generating a hash or nonce for each inline script and including it in both your CSP and your inline script tags.
For example, to allow a specific inline script using a hash:
"script-src": [
"'sha256-Base64EncodedHashOfTheScript'",
// other sources...
],
Or, using a nonce:
"script-src": [
"'nonce-RandomValue'",
// other sources...
],
This approach requires dynamically generating the hash or nonce for each request.
These steps are aimed at troubleshooting and potentially resolving the CSP issue related to inline scripts in your Next.js application. If you're still facing issues, providing the exact JavaScript code for the login button and any specific error messages from the console when the issue occurs could help pinpoint the problem more accurately.
Details
Sources
- frontend/next.config.js
- frontend/app/(auth)/login/page.tsx
- frontend/app/(auth)/login/components/GoogleLogin/index.tsx
About Dosu
This response is meant to be useful and save you time. It is not meant to be a precise solution, but rather a starting point for your own research.
Help me be more useful! Please leave a 👍 if this is helpful and 👎 if it is irrelevant.
To continue the conversation, mention @dosu.
from quivr.
Hey there, @amogh007! 👋 I'm Dosu, a bot here to lend a hand with bugs, answer your questions, or help you dive into contributing while you're waiting for a human maintainer to swing by. Think of me as your friendly neighborhood assistant in the digital realm! I've caught sight of your issue about the login button not working due to a JavaScript hiccup, and I'm rolling up my virtual sleeves to dig into it. I'll be back with a more detailed response in a jiffy!
from quivr.
ok
from quivr.
this is the i error i am getting in console "Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword" i changed it to use inline script in next.conf.js but still error exists
from quivr.
Related Issues (20)
- [Bug]: error /app/node_modules/sharp: Command failed. HOT 2
- LocalAI support HOT 3
- [Bug]: GPT4 Brain code is not clean
- [Bug]: Unable to start backend-core HOT 8
- [Bug]: "error":"model 'llama2' not found, try pulling it first" HOT 6
- [Bug]: How to use the embedding model of ollama HOT 2
- [Bug]: runtime error: slice bounds out of range [1:0] HOT 1
- [Bug]: No model on ollama was used to answer HOT 18
- [Bug]: Not able to create brain on AWS Linux HOT 1
- [Epic]: Where does the user change the language? HOT 3
- How to set up the groq api? HOT 3
- [Bug]: it's still using OpenAI after set Ollama in .env file HOT 2
- [Feature]: azure open ai vs OpenAI key
- [Bug]: UnpickleableExceptionWrapper('postgrest.exceptions', 'APIError', ('{\'code\': \'42P01\', \'details\': None, \'hint\': None, \'message\': \'relation "public.syncs_active" does not exist\'}',), 'Error 42P01:\nMessage: relation "public.syncs_active" does not exist') HOT 3
- [Feature]: it should handle large pdf files and epub files
- [Bug]: Use Ollama model HOT 26
- [Feature]: email RAG HOT 1
- [Bug]: failed to fetch;failed to connect 54323,but 5050 report status ok HOT 5
- User story: Refactor backend package manager
- [Bug]: ERROR [frontend deps 1/5] RUN apk add --no-cache libc6-dev python3 make g++ HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from quivr.