[Webkit-unassigned] [Bug 166630] Inline styles added by WebKit when viewing PDFs cause CSP violation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=166630

--- Comment #2 from j162011 at gmail.com ---
(In reply to comment #1)
> (In reply to comment #0)
> > [Report Only] Refused to apply inline style because it violates the
> > following Content Security Policy directive: "default-src 'self'". Either
> > the 'unsafe-inline' keyword, a hash
> > ('sha256-1kQs8h/ra9YlH+s6eZbKdSD/cn6Ljcz2Rv60pJnk/eY='), or a nonce
> > ('nonce-...') is required to enable inline execution. Note also that
> > 'style-src' was not explicitly set, so 'default-src' is used as a fallback.
> > 
> 
> I am assuming that you encountered this issue in Safari/WebKit (will check
> shortly) as this error message is from Chrome/Blink. What version and build
> number of Safari did you encounter this issue? You can find this version
> information in Safari > About Safari (the build number will be in
> parentheses).

Actually I encountered this issue in the following:
* Google Chrome 55.0.2883.87 m (64-bit)
* Google Chrome 57.0.2968.0 canary (64-bit)
* Opera 42.0.2393.94
All the above have [AppleWebKit/537.36] in the browser useragent

I assumed it was an issue with WebKit as the inline styling and error message was identical between the browsers. I was not aware of Blink, so apologise if I have reported this issue in the wrong place.

I cannot test with Safari as I don't have an iOS platform I can use.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161231/26cefb6c/attachment.html>