1463898 - many csp errors when filing a new bug

Status: RESOLVED DUPLICATE of bug 1461839

(bugzilla.mozilla.org :: Bug Creation/Editing, defect)

Description

[Dana Keeler (she/her) [:keeler]]

STR:
1. Log in to bugzilla
2. Open the form to file a new bug (e.g. https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Security%3A%20PSM )
3. Open the developer console:

Content Security Policy: Ignoring “'unsafe-inline'” within script-src or style-src: nonce-source or hash-source specified
Content Security Policy: This site (https://bugzilla.mozilla.org) has a Report-Only policy without a report URI. CSP will not block and cannot report violations of this policy.
Loading failed for the <script> with source “https://bugzilla.mozilla.org/static/v20180508.1/extensions/GoogleAnalytics/web/js/analytics.js”. enter_bug.cgi:164
Loading failed for the <script> with source “https://bugzilla.mozilla.org/static/v20180508.1/extensions/GoogleAnalytics/web/js/dnt-helper.js”. enter_bug.cgi:164
Loading failed for the <script> with source “https://bugzilla.mozilla.org/static/v20180508.1/extensions/TrackingFlags/web/js/tracking_flags.js”. enter_bug.cgi:164
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onsubmit attribute on FORM element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on INPUT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onchange attribute on SELECT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on A element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on DIV element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onfocus attribute on TEXTAREA element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on INPUT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onkeyup attribute on TEXTAREA element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onblur attribute on TEXTAREA element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onchange attribute on SELECT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onchange attribute on INPUT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onchange attribute on SELECT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on INPUT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onfocus attribute on TEXTAREA element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on INPUT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onchange attribute on SELECT element. enter_bug.cgi
Content Security Policy: The page’s settings observed the loading of a resource at self (“script-src”). A CSP report is being sent. Source: onclick attribute on INPUT element. enter_bug.cgi

Comment 1

[Dylan Hardison [:dylan] (he/him)]

Those are intentional for the moment -- and should be not-fatal errors.