Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blocked script execution b/c 'allow-scripts' permission is not set. #20

Closed
100ideas opened this issue Mar 8, 2017 · 3 comments
Closed
Labels

Comments

@100ideas
Copy link

100ideas commented Mar 8, 2017

The console button isn't working for me on some of the casts (scrimbacasts? scrimbas?). I'm using macOS Chrome Version 56.0.2924.87 (64-bit). Not sure if this is because I have set an unusual Content Security Policy for chrome. Here's what I see in my browser's console when watching https://scrimba.com/cast/cast-327

Blocked script execution in 'https://scrimba.com/cast/cast-327.preview' because the document's frame is sandboxed and the 'allow-scripts' permission is not set.

docs on Content Security Policy headers here https://developer.chrome.com/extensions/contentSecurityPolicy

@judofyr judofyr added the bug label Mar 9, 2017
@judofyr
Copy link

judofyr commented Mar 9, 2017

This is most likely caused by extensions which automatically inject scripts into every frame on the page. Could you try to load the page in Incognito mode (without extensions) and see if they disappear?

@ph8tel
Copy link

ph8tel commented May 31, 2017

I'm getting the same errors. Both in regular and incognito modes

@somebee
Copy link
Member

somebee commented Jun 1, 2017

Which casts is this happening on? The sandbox warning can happen when people include scripts in the html-part of the example, which is then rendered in the preview. So in that case it's really nothing to worry about, it's just that we don't preparse the html and remove the script-tags when we replay things in preview. The fact that you cannot open the console sounds like a bug though.

If you don't want to share the affected casts publicly you could PM me the link on gitter :)

@somebee somebee closed this as completed Dec 1, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants