GUI loader.js doesn't load with CSP in place

[LipuFei]

Under which category would you file this issue?

Airflow Core

Apache Airflow version

3.2.1

What happened and how to reproduce it?

On the DAG execution details page, the "Details" block is stuck in "Loading". The content is actually available. I can click on the "copy" button to get the details.

Based on my browser's console output, I think it's CSP issue with the Javascript loader.js. I have a CSP policy "script-src" 'self' 'unself-inline'", which blocks cross-site script loading. This pages tries to load loader.js` from https://cdn.jsdelivr.net. I think this is why the UI is stuck in "Loading".

I'm not a Javascript expert, but I guess the fix is to bundle the relevant JS files so it doesn't need to go cross-site?

Here is a screenshot:

What you think should happen instead?

The UI elements should load correctly with CSP in place.

Operating System

No response

Deployment

Official Apache Airflow Helm Chart

Apache Airflow Provider(s)

No response

Versions of Apache Airflow Providers

No response

Official Helm Chart version

1.20.0

Kubernetes Version

1.33.10

Helm Chart configuration

No response

Docker Image customizations

No response

Anything else?

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct