CODEWITHSUNDEEP
firefoxcontent-security-policy
Stefan Scherfke
Stefan Scherfke

Reputation: 3222

Strange CSP error in Firefox

I recently added the following CSP policies for https://stefan.sofa-rockers.org/

default-src 'self'; style-src 'self' https://brick.a.ssl.fastly.net; font-src 'self' https://brick.a.ssl.fastly.net

It seems to work well on all browser, but Firefox is showing me this strange, truncated error message:

Content Security Policy: The page’s settings blocked the loading of a resource at self (“default-src https://stefan.sofa-rockers.org”). Source: (function (ERROR) {

    const V8_STACK_.... stefan.sofa-rockers.org:1

Do I have an error in my CSP (all resources are getting loaded, so I don't think this is the case) or might this be a bug in Firefox itself?

Upvotes: 2

Views: 3811

Answers (1)

sideshowbarker
sideshowbarker

Reputation: 87984

It looks like you may be hitting a known Firefox bug that’s been partially fixed in Firefox 58. See the Improved Content Security Policy (CSP) Handling section of the following blog post:

https://blog.mozilla.org/addons/2017/11/20/extensions-in-firefox-58/

The relevant existing Firefox bugs are these:

And specifically, as noted in the comments here, if you have the Privacy Badger add-on installed, you might need to consider disabling it.

See also the following related Stack Overflow answers:

Upvotes: 4

Related Questions