CSP - logrocket handling?












0














I quite can't get the relevant info about Content Security Policy configuration when it comes to logrocket.



My browser is throwing me those errors:




Refused to create a worker from
'blob:http://localhost:3005/db6c0a5a-f849-46bb-9a80-38423csdf9a'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.



Refused to create a worker from
'data:application/javascript,!function(e)%7Bvar%20t%3D%7B%7D%3Bfunction%20r(n)%7Bif(t%5Bn%5D)return%20t%5Bn%5D.exports%3Bvar%20o%3Dt%5Bn%5D%3D%7Bi%3An%2Cl%3A!1%2Cexports%3A%7B%7D%7D%3Breturn%20e%5Bn%5D.call(o.exports%2Co%2Co.exports%2Cr)%2Co.l%3D!0%2Co.exports%7Dr.m%3De%2Cr.c%3Dt%2Cr.d%3Dfunction(e%2Ct%2Cn)%7Br.o(e%2Ct)%7C%7CObject.defineProperty(e%2Ct%2C%7Benumerable%3A!0%2Cget%3An%7D)%7D%2Cr.r%3Dfunction(e)%7B%22undefined%22!%3Dtypeof%20Symbol%26%26Symbol.toStringTag%26%26Object.defineProperty(e%2CSymbol....ict%22%3Be.exports%3Dfunction(e%2Ct%2Cr%2Cn%2Co%2Ci%2Cs%2Ca)%7Bif(!e)%7Bvar%20u%3Bif(void%200%3D%3D%3Dt)u%3Dnew%20Error(%22Minified%20exception%20occurred%3B%20use%20the%20non-minified%20dev%20environment%20for%20the%20full%20error%20message%20and%20additional%20helpful%20warnings.%22)%3Belse%7Bvar%20l%3D%5Br%2Cn%2Co%2Ci%2Cs%2Ca%5D%2Cc%3D0%3B(u%3Dnew%20Error(t.replace(%2F%25s%2Fg%2Cfunction()%7Breturn%20l%5Bc%2B%2B%5D%7D))).name%3D%22Invariant%20Violation%22%7Dthrow%20u.framesToPop%3D1%2Cu%7D%7D%7D%5D)%3B'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.




How should I implement the CSP here to allow the logrocket to connect?










share|improve this question




















  • 1




    Add 'worker-src blob: data:' to your policy
    – sideshowbarker
    Nov 13 at 23:10
















0














I quite can't get the relevant info about Content Security Policy configuration when it comes to logrocket.



My browser is throwing me those errors:




Refused to create a worker from
'blob:http://localhost:3005/db6c0a5a-f849-46bb-9a80-38423csdf9a'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.



Refused to create a worker from
'data:application/javascript,!function(e)%7Bvar%20t%3D%7B%7D%3Bfunction%20r(n)%7Bif(t%5Bn%5D)return%20t%5Bn%5D.exports%3Bvar%20o%3Dt%5Bn%5D%3D%7Bi%3An%2Cl%3A!1%2Cexports%3A%7B%7D%7D%3Breturn%20e%5Bn%5D.call(o.exports%2Co%2Co.exports%2Cr)%2Co.l%3D!0%2Co.exports%7Dr.m%3De%2Cr.c%3Dt%2Cr.d%3Dfunction(e%2Ct%2Cn)%7Br.o(e%2Ct)%7C%7CObject.defineProperty(e%2Ct%2C%7Benumerable%3A!0%2Cget%3An%7D)%7D%2Cr.r%3Dfunction(e)%7B%22undefined%22!%3Dtypeof%20Symbol%26%26Symbol.toStringTag%26%26Object.defineProperty(e%2CSymbol....ict%22%3Be.exports%3Dfunction(e%2Ct%2Cr%2Cn%2Co%2Ci%2Cs%2Ca)%7Bif(!e)%7Bvar%20u%3Bif(void%200%3D%3D%3Dt)u%3Dnew%20Error(%22Minified%20exception%20occurred%3B%20use%20the%20non-minified%20dev%20environment%20for%20the%20full%20error%20message%20and%20additional%20helpful%20warnings.%22)%3Belse%7Bvar%20l%3D%5Br%2Cn%2Co%2Ci%2Cs%2Ca%5D%2Cc%3D0%3B(u%3Dnew%20Error(t.replace(%2F%25s%2Fg%2Cfunction()%7Breturn%20l%5Bc%2B%2B%5D%7D))).name%3D%22Invariant%20Violation%22%7Dthrow%20u.framesToPop%3D1%2Cu%7D%7D%7D%5D)%3B'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.




How should I implement the CSP here to allow the logrocket to connect?










share|improve this question




















  • 1




    Add 'worker-src blob: data:' to your policy
    – sideshowbarker
    Nov 13 at 23:10














0












0








0







I quite can't get the relevant info about Content Security Policy configuration when it comes to logrocket.



My browser is throwing me those errors:




Refused to create a worker from
'blob:http://localhost:3005/db6c0a5a-f849-46bb-9a80-38423csdf9a'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.



Refused to create a worker from
'data:application/javascript,!function(e)%7Bvar%20t%3D%7B%7D%3Bfunction%20r(n)%7Bif(t%5Bn%5D)return%20t%5Bn%5D.exports%3Bvar%20o%3Dt%5Bn%5D%3D%7Bi%3An%2Cl%3A!1%2Cexports%3A%7B%7D%7D%3Breturn%20e%5Bn%5D.call(o.exports%2Co%2Co.exports%2Cr)%2Co.l%3D!0%2Co.exports%7Dr.m%3De%2Cr.c%3Dt%2Cr.d%3Dfunction(e%2Ct%2Cn)%7Br.o(e%2Ct)%7C%7CObject.defineProperty(e%2Ct%2C%7Benumerable%3A!0%2Cget%3An%7D)%7D%2Cr.r%3Dfunction(e)%7B%22undefined%22!%3Dtypeof%20Symbol%26%26Symbol.toStringTag%26%26Object.defineProperty(e%2CSymbol....ict%22%3Be.exports%3Dfunction(e%2Ct%2Cr%2Cn%2Co%2Ci%2Cs%2Ca)%7Bif(!e)%7Bvar%20u%3Bif(void%200%3D%3D%3Dt)u%3Dnew%20Error(%22Minified%20exception%20occurred%3B%20use%20the%20non-minified%20dev%20environment%20for%20the%20full%20error%20message%20and%20additional%20helpful%20warnings.%22)%3Belse%7Bvar%20l%3D%5Br%2Cn%2Co%2Ci%2Cs%2Ca%5D%2Cc%3D0%3B(u%3Dnew%20Error(t.replace(%2F%25s%2Fg%2Cfunction()%7Breturn%20l%5Bc%2B%2B%5D%7D))).name%3D%22Invariant%20Violation%22%7Dthrow%20u.framesToPop%3D1%2Cu%7D%7D%7D%5D)%3B'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.




How should I implement the CSP here to allow the logrocket to connect?










share|improve this question















I quite can't get the relevant info about Content Security Policy configuration when it comes to logrocket.



My browser is throwing me those errors:




Refused to create a worker from
'blob:http://localhost:3005/db6c0a5a-f849-46bb-9a80-38423csdf9a'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.



Refused to create a worker from
'data:application/javascript,!function(e)%7Bvar%20t%3D%7B%7D%3Bfunction%20r(n)%7Bif(t%5Bn%5D)return%20t%5Bn%5D.exports%3Bvar%20o%3Dt%5Bn%5D%3D%7Bi%3An%2Cl%3A!1%2Cexports%3A%7B%7D%7D%3Breturn%20e%5Bn%5D.call(o.exports%2Co%2Co.exports%2Cr)%2Co.l%3D!0%2Co.exports%7Dr.m%3De%2Cr.c%3Dt%2Cr.d%3Dfunction(e%2Ct%2Cn)%7Br.o(e%2Ct)%7C%7CObject.defineProperty(e%2Ct%2C%7Benumerable%3A!0%2Cget%3An%7D)%7D%2Cr.r%3Dfunction(e)%7B%22undefined%22!%3Dtypeof%20Symbol%26%26Symbol.toStringTag%26%26Object.defineProperty(e%2CSymbol....ict%22%3Be.exports%3Dfunction(e%2Ct%2Cr%2Cn%2Co%2Ci%2Cs%2Ca)%7Bif(!e)%7Bvar%20u%3Bif(void%200%3D%3D%3Dt)u%3Dnew%20Error(%22Minified%20exception%20occurred%3B%20use%20the%20non-minified%20dev%20environment%20for%20the%20full%20error%20message%20and%20additional%20helpful%20warnings.%22)%3Belse%7Bvar%20l%3D%5Br%2Cn%2Co%2Ci%2Cs%2Ca%5D%2Cc%3D0%3B(u%3Dnew%20Error(t.replace(%2F%25s%2Fg%2Cfunction()%7Breturn%20l%5Bc%2B%2B%5D%7D))).name%3D%22Invariant%20Violation%22%7Dthrow%20u.framesToPop%3D1%2Cu%7D%7D%7D%5D)%3B'
because it violates the following Content Security Policy directive:
"child-src 'self' localhost:7331". Note that 'worker-src' was not
explicitly set, so 'child-src' is used as a fallback.




How should I implement the CSP here to allow the logrocket to connect?







javascript content-security-policy






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 13 at 23:09









sideshowbarker

30.8k137191




30.8k137191










asked Nov 13 at 17:53









Ancinek

822731




822731








  • 1




    Add 'worker-src blob: data:' to your policy
    – sideshowbarker
    Nov 13 at 23:10














  • 1




    Add 'worker-src blob: data:' to your policy
    – sideshowbarker
    Nov 13 at 23:10








1




1




Add 'worker-src blob: data:' to your policy
– sideshowbarker
Nov 13 at 23:10




Add 'worker-src blob: data:' to your policy
– sideshowbarker
Nov 13 at 23:10

















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53286872%2fcsp-logrocket-handling%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53286872%2fcsp-logrocket-handling%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Guess what letter conforming each word

Port of Spain

Run scheduled task as local user group (not BUILTIN)