Script Loading Errors

Kinetic ERP
1

Anybody else see content security policies preventing script loading on CDC Subscriber Management?

repro steps:

  1. From the main menu, go to System Management > CDC Management > CDC Subscriber Management.

  2. F12 to open devtools

  3. In the Summary card, select the Collaborate subscriber.

  4. In the Details > Rules card, select any rule choose edit from grid actions

  5. See this in console?

image
image2527×951 249 KB

2

Are you licensed for Collaborate?

3

we pay for it and its working so yeah. This appears to be a Content Security Policy issue on the webserver disallowing blob script loading.

Although the CSP is VERY permissive, ie includes:

script-src  'self' 'unsafe-eval' 'unsafe-inline'

it does not include:

blob: data:

I’m guessing if other’s CSP headers are the same, then the error is not specific to our env.