Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Nextcloud Office: Cross-Origin-Opener-Policy breaks other nextcloud apps #4103

Open
droogi opened this issue Oct 8, 2024 · 2 comments · May be fixed by #4207
Open

Nextcloud Office: Cross-Origin-Opener-Policy breaks other nextcloud apps #4103

droogi opened this issue Oct 8, 2024 · 2 comments · May be fixed by #4207

Comments

@droogi
Copy link

droogi commented Oct 8, 2024

Describe the bug
enabling Nextcloud Office breaks other nextcloud apps

To Reproduce
Steps to reproduce the behavior:

  1. Enable Nextcloud Office 8.5.1
  2. Click on maps or memories
  3. maps: tiles are not loaded, memories: preview is not displayed, pictures are not loaded

Expected behavior
Other nextcloud apps should work

Screenshots

  • e.g no preview in memories Image

  • e.g no tiles in maps

Image

Client details:

  • OS: windows 11, android, android memories app
  • Firefox 131, Edge 129
  • Device: desktop, android, nextcloud apps

Server details

Operating system: dietpi 9.7

Web server: nginx 1.22.1

Database: MariaDB

PHP version: PHP 8.2.24

Nextcloud version: 29 & 30

Version of the richdocuments app: Nextcloud Office 8.5.1

Browser log

mistakes:

    The source list for the Content Security Policy directive 'connect-src' contains an invalid source: '://'. It will be ignored.

    c.tile.openstreetmap.org/11/1086/692.png:1

        GET https://c.tile.openstreetmap.org/11/1086/692.png net::ERR_BLOCKED_BY_RESPONSE.NotSameOriginAfterDefaultedToSameOriginByCoep 200 (OK)

Hit F12 to open developer tools, switch to Network tab, reload page with F5. At the top of the request list, select maps/, then select "Headers" tab in the newly opened frame.

Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener Policy: same-origin

Discovery and possible root cause

discovery
possible root cause with explanation by MichaIng
same? failure was mentioned [here] (#3260)

@droogi
Copy link
Author

droogi commented Oct 27, 2024

@juliusknorr could you please have a look at this issue?

tcitworld added a commit that referenced this issue Nov 7, 2024
…bedder-Policy on richdocuments

Otherwise it's being added to absolutely all requests, creating issues in other apps

Closes #4103

Signed-off-by: Thomas Citharel <[email protected]>
@kstorbakken
Copy link

Any update on this issue? It's preventing me from updating past NC 28. I thought there was something wrong with my install but I was able to confirm I'm experiencing this problem.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants