Refused to execute JavaScript URL

[mohammedESSABRI]

Tell us where you are using Dejavu (Hosted web app, Chrome extension, Docker Image, Within appbase.io)

Chrome extension

What is the version of Dejavu that you are using?

1.6.1

Describe the issue that you are seeing, or the feature request :-), include any screenshots as necessary.

When trying to perform a query, it shows Refused to execute JavaScript URL because it violates the following Content Security Policy directive: "script-src 'self' blob: filesystem: chrome-extension-resource:". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

Only default view is working

If your issue deals with accessing Elasticsearch cluster, share the necessary steps to replicate the behavior (the configuration.yml settings, where your ES cluster is hosted, any relevant logs).

If your issue deals with a UI issue, share with us a screenshot of the failing network request or the browser console log showing the error.

[siddharthlatest]

@mohammedESSABRI I am not able to replicate the issue. Can you share the following details?

1. What query are you running?
2. Which of the query operations from below have you selected?
   
3. Can you share console logs relevant to the error?

[mohammedESSABRI]

Dear @siddharthlatest,

I try just to update a doc using the interface but is not working, here is the error:

index.html#?input_state=XQAAAAJtBAAAAAAAAAA9iIqnY-B2BnTZGEQzY8iwkHG0t_gDNgV…40q9U3DyyHs0XAZQAC5BLQfT2veiDBFnGDfaWM0aHhgjGXsGzt___2qQkA&editable=true:1 Uncaught (in promise) SyntaxError: Unexpected token N in JSON at position 0
    at parse (<anonymous>)

Also it showed this error:

Refused to execute JavaScript URL because it violates the following Content Security Policy directive: "script-src 'self' blob: filesystem: chrome-extension-resource:". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

Thanks and best regards,

[siddharthlatest]

@mohammedESSABRI Afaict, we don't use inline script blocks but still going to confirm this. Could it be possible that some other extension you have is trying to inject a script tag? One way to know for sure is for you to enable Dejavu to work in Incognito mode and try it there (see below screenshot, you can do this from your chrome://extensions page, click on Details button on the Dejavu extension)

I suspect that might be the case as I don't see this error (or haven't heard about it from any other user till now).

[siddharthlatest]

Closing this due to inactivity - also, dejavu (as chrome extension) can run in incognito mode starting 2.0.0.