Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSP Error in Safari in Login #579

Open
AndrewJSchoen opened this issue Apr 25, 2024 · 1 comment
Open

CSP Error in Safari in Login #579

AndrewJSchoen opened this issue Apr 25, 2024 · 1 comment

Comments

@AndrewJSchoen
Copy link

Thanks for the template/starter! I am currently experiencing an error, and I am not sure exactly where it is coming from. Right now it is still very much the starting template project, with my custom env configured with my firebase credentials. When clicked, it redirects to google auth, and then redirects back on login. While this works seamlessly on Chrome, it seems to create an error in Safari with the following:

Unrecognized Content-Security-Policy directive 'require-trusted-types-for'

When it redirects back to my app, it doesn't appear to have correctly logged in the user (the login button remains). Again, this is something that only appears to happen in Safari, and Chrome works fine. Is this something that is mis-configured in Vite, firebase, or missing in this template? Thanks!

@AndrewJSchoen
Copy link
Author

A couple more wrinkles: On firefox, it also breaks, with a slightly different error:

Content-Security-Policy: The page's settings blocked the loading of a resource at inline ("script-src"). 

That being said, it seems like these might be errors specific to google's current signIn page, since they seem to be present in other google-based logins in the wild.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant