Comments (8)
I am not able to reproduce this in any browser and am hearing about this for the first time. This must be some setting in your browser content policies, a browser plugin you enabled or a proxy server that strips out the allow-origin
header that is causing this.
from feathers-chat.
Some plugin blocking the script I would expect from Firefox, but I don't usually use Chromium, and I don't have anything strange installed.
Also tried Epiphany (or Gnome Web), and got something similar
[Error] Refused to load https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.12.0/moment.js because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load https://unpkg.com/@feathersjs/client@^4.3.0/dist/feathers.js because it does not appear in the script-src directive of the Content Security Policy.
[Error] Failed to load resource: Error performing TLS handshake: An unexpected TLS packet was received. (base.css, line 0)
[Error] Failed to load resource: Error performing TLS handshake: An unexpected TLS packet was received. (chat.css, line 0)
[Error] Failed to load resource: Error performing TLS handshake: An unexpected TLS packet was received. (socket.io.js, line 0)
[Error] Failed to load resource: Error performing TLS handshake: An unexpected TLS packet was received. (client.js, line 0)
[Error] Failed to load resource: Error performing TLS handshake: An unexpected TLS packet was received. (favicon.ico, line 0)
So, I tried three different browsers with three different engines, more or less same issue.
On the other hand, this seems to happen only to me :|
from feathers-chat.
And the address of the socket.io plugin gives me 404
https://socket.io/socket.io.js
from feathers-chat.
The script address is http://localhost:3030/socket.io/socket.io.js
. Aside from that, I'm not sure if we can help you here. This looks like a problem very specific to your system (looking at the SSL error your OpenSSL configuration may be borked). I'd recommend to try it on a different operating system in a VM to see if it persists.
from feathers-chat.
from feathers-chat.
i have the same issue here. any solutions?
from feathers-chat.
You can add
app.use((req, res, next) => {
res.header('Content-Security-Policy', 'script-src 'self' unpkg.com cdnjs.cloudflare.com');
next();
});
To src/app.js
.
What I don't understand is why setting the equivalent meta tag in public/index.html
does not seem to work:
<meta http-equiv="Content-Security-Policy" content="script-src 'self' unpkg.com cdnjs.cloudflare.com">
Content security policies are a complicated not really Feathers specific topic. More info can be found at content-security-policy.com and MDN documentation (both did not answer the question why my meta
tag does not work though).
from feathers-chat.
Ok, figured it out, it was the new version of helmet. In your src/app.js|ts
change
app.use(helmet());
To
app.use(helmet({
contentSecurityPolicy: false
}));
This will no longer happen in a newly generated application.
from feathers-chat.
Related Issues (20)
- oauth github sign in HOT 4
- How would the front end connect to a remote backend? HOT 2
- Example 'app.publish is not a function' HOT 1
- Cannot get github auth working HOT 4
- Upgrading Helmet to the next major version
- Initial click on "Sign up and log in" fails with No record found for id '1' HOT 1
- app.listen(...).on is not a function HOT 1
- Test configuration not working HOT 1
- clear install ReferenceError: feathers is not defined HOT 1
- Cannot find module 'feathers-chat' or its corresponding type declarations. HOT 5
- [FR] first class module support HOT 1
- [fr] make app.ts export an asynchronous function HOT 4
- oauth github fails with `error: BadRequest: validation failed` HOT 5
- Workflows breaks Cloud IDE's HOT 1
- [perf] Database migration takes 40 seconds with an empty database HOT 1
- [FR] More DX improvements
- [FR] Support ESM out of the box
- Feathers Chat MySQl/MariaDB version
- Sample Chat Not Working for MongoDB HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from feathers-chat.