After Nextcloud 11 Update a lot of errors in Browser Console

Hi, i updated my VPS today from Nextcloud 10.0.2 to Nextcloud 11 with the updater app build in nextcloud. The update process runs fine without any errors shown.
After update process i also had no errors in the logfile, but a lot of errors in the browser console.
I don’t know whats the problem because i already have no error messages in my nextcloud log files and web server log files and i don’t understand the console errors.

With Nextcloud 10.0.2 i don’t have such errors…

Information:

Server runs at CentOS 7
Apache 2.4.6
MariaDB 5.5.52
PHP 7.0.14

Browser:
Safari 10.0.1
Firefox 50.0.2

What i have tried to find a solution:

  • restore my nextcloud from backup and start the update process again, but this time manually and not with the updater app, but this doesn’t help. (no errors in my log files, but same errors in browser console)

  • checked the permissions, all was fine…
    -tried it with firefox 50.0.2 but same errors in browser console
    -cleaned browser cache

Console Errors:

I erased the links in the error messages because new forum user can only post 2 links…
So i had replaced the domain (https://cloudy.mydomain.de/) with DOMAIN/

[ Error] Refused to load https://cloudy.mydomain.de/core/vendor/moment/min/moment-with-locales.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/moment/min/moment-with-locales.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAINcore/vendor/handlebars/handlebars.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/blueimp-md5/js/md5.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/bootstrap/js/tooltip.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/backbone/backbone.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/es6-promise/dist/es6-promise.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/davclient.js/lib/client.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/clipboard/dist/clipboard.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/autosize/dist/autosize.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/jquery.ocdialog.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/oc-dialogs.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/js.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/l10n.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/l10n/de_DE.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/octemplate.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/eventsource.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/public/appconfig.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/config.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/search/js/search.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/oc-requesttoken.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/apps.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/mimetype.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/mimetypelist.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/snapjs/dist/latest/snap.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/backbone/backbone.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/oc-backbone.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/placeholder.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/jquery.avatar.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/shareconfigmodel.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/shareitemmodel.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/sharedialogresharerinfoview.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/sharedialoglinkshareview.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/sharedialogexpirationview.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/sharedialogshareelistview.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/sharedialogview.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/share.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/apps/files_pdfviewer/js/previewplugin.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/apps/files_videoplayer/js/viewer.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/apps/gallery/l10n/de_DE.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/select2/select2.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/select2-toggleselect.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/jquery-ui-fixes.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/files/fileinfo.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/files/client.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/vendor/jsTimezoneDetect/jstz.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/visitortimezone.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/lostpassword.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/core/js/login.js?v=2fcb0c2084dfcc62cb941f329f01b63e because it does not appear in the script-src directive of the Content Security Policy.
[Error] Refused to load DOMAIN/apps/theming/js/theming?v=0 because it does not appear in the script-src directive of the Content Security Policy.}

Hope someone can help me, thanks in advanced.

regards nitroese

@LukasReschke @MorrisJobke might be one for you guys.

1 Like

In private discussion with the author about his issue. THX for the heads-up @JasonBayton.

1 Like

Fixed with https://github.com/nextcloud/server/pull/2668 and will be released with 11.0.1 and 12.0 :wink:

1 Like

I upgraded my installation from 10.3 to 11.0.1 yesterday. Now I also get these errors in Firefox and Chrome, while everything works fine in Opera, Edge and Vivaldi. All mentionned browser are on their respective most actual version.