securedrop
securedrop copied to clipboard
CSP error on production servers with no visible effect
Description
Tor Browser displays a CSP error on the console when loading a production Source Interface or Journalist Interface (2.1.0), but it appears to have no visible effect.
Steps to Reproduce
- Load a prod 2.1.0 Source Interface or Journalist Interface in Tor Browser without custom add-ons
Expected Behavior
No errors logged on console
Actual Behavior
CSP error Content Security Policy: The page’s settings blocked the loading of a resource at data: (“default-src”).
No other apparent effect