Certain site won't load for violating security policy

[darukutsu]

Describe the bug
I think this is related to pagetual or maybe greasymonkey/userscripts in general. Sites like teams.microsoft.com won't load (or will load with error prompt to clear cache, which doesn't work) until script is disabled. I had to put manually exclude // @exclude *://*.microsoft.com/* and since then I don't experience any problems.

To Reproduce
Steps to reproduce the behavior:

1. Login to 'teams.microsoft.com'
2. See error

Expected behavior
Be able to use teams

Desktop (please complete the following information):

• OS: Linux
• Browser: qutebrowser
• Version: v3.5.1 Git commit: c37b9ebf5

Additional context

Refused to create a TrustedTypePolicy named 'pagetual_default' because it violates the following Content Security Policy directive: 
"trusted-types dompurify @msteams/components-calling-ppt-sharing#components-calling-ppt-sharing @msteams/core-services-telemetry-worker#TelemetryWorker @msteams/frameworks-loader#telemetry-sender 
@msteams/frameworks-loader#load-build-chunk @msteams/frameworks-loader#dompurify
@msteams/frameworks-loader#register-service-worker-early @msteams/react-web-client 
@msteams/services-io-browser-web-client-update#register-service-worker 
@msteams/services-utilities-common#ChunkLoader @msteams/core-cdl-worker-common#create-cdl-worker @msteams/frameworks-loader#create-cdl-worker @msteams/services-io-calling-service-adapters#cmdb-calling-bundle-loader-service-adapter 
@msteams/calling-adapters#vdi-calling-bundle-loader html2canvas @fluidx/loop highcharts shaka-player#xml 
@msstream/one-player#noop-create-html @msstream/one-player#sanitize-html 
@msstream/azuremediaplayer#worker-noop @msstream/azuremediaplayer#noop @msstream/one-player-loader#webpack 
@msstream/one-player-loader-preview#webpack adaptivecards#markdownPassthroughPolicy adaptivecards#restoreContentsPolicy adaptivecards#deprecatedExportedFunctionPolicy @fluidx/loop#catalog-container 
@fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container 
@fluidx/loop#sourceless-iframe @1js/lpc-common-web#webpack @1js/midgard-bootstrapper#webpack 
@1js/lpc-teams-bootstrapper#webpack @1js/midgard-trusted-types @1js/officeaicopilot-chat-localized#webpack 
@azure/ms-rest-js#xml.browser officebrowserfeedback#domUtils @centro/hvc-loader @centro/floodgate 
@msteams/components-location-bing-map#location-sdk-api".

@ userscript:GM-hoothin/Pagetual:1927

[hoothin]

Thank you for your feedback.

I suspect this is an issue with Qutebrowser's support for userscripts, as I haven't encountered this problem in Chrome on that page.

However, I have still attempted to update the code related to TrustedTypePolicy. Now, if the current page already has a TrustedTypePolicy, Pagetual will try to reuse the existing one.

[darukutsu]

Yeah qutebrowser be like that. Can't use extensions at all sadly. Seems to work for now upon first load, but refreshing page will result in same issue, different error. I can't even configure pagetual using readme with error "You have not imported base rule...". Thankfully ootb experience is enough for me. I'll close this since problem lies elsewhere, will need to investigate qutebrowser/qutebrowser#3238 for possible alternatives.