CSP & Vue errors

Nextcloud version (eg, 20.0.5): 20.0.8
Operating system and version (eg, Ubuntu 20.04): Ubuntu 20.04
Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.41
PHP version (eg, 7.4): 7.4 FPM

The issue you are facing: CSP and sporadic Vue.js errors. CSP errors seem to be limited to Firefox. Vue.js errors seen on FF and Chrome.

Is this the first time you’ve seen this error? (Y/N): Y (started in past few days)

Steps to replicate it:

  1. Log into Nextcloud instance
  2. View browser developer tools
  3. Navigate to Console and filter to Errors

Browser-side console errors:

Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). preload.js:136:52
Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). fingerprint-protection.js:343:25
Content Security Policy: The page’s settings blocked the loading of a resource at eval (“script-src”). global.js:10:10
Please do NOT wait for the DOMContentLoaded before registering your viewer handler Viewer.vue:217
    handlers Viewer.vue:217
    VueJS 4
Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). fingerprint-protection.js:343:25

The output of your Nextcloud log in Admin > Logging:
none of note

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'overwrite.cli.url' => 'https://redacted/',
  'htaccess.RewriteBase' => '/',
  'instanceid' => 'occrhvgcv0u2',
  'passwordsalt' => 'redacted',
  'secret' => 'redacted',
  'trusted_domains' =>
  array (
    0 => redacted
  ),
  'trusted_proxies' =>
  array (
    0 => 'redacted',
  ),
  'datadirectory' => '/var/www/nextcloud/data',
  'dbtype' => 'mysql',
  'version' => '20.0.8.1',
  'dbname' => 'nextcloud',
  'dbhost' => '192.168.173.92',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => 'redacted',
  'installed' => true,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'tls',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'redacted',
  'mail_domain' => 'redacted,
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'smtp.redacted.com',
  'mail_smtpport' => '587',
  'mail_smtpname' => 'redacted',
  'mail_smtppassword' => 'redacted',
  'maintenance' => false,
  'theme' => '',
  'loglevel' => 2,
  'updater.release.channel' => 'stable',
  'twofactor_enforced' => 'true',
  'twofactor_enforced_groups' =>
  array (
  ),
  'twofactor_enforced_excluded_groups' =>
  array (
  ),
  'app_install_overwrite' =>
  array (
    0 => 'jsloader',
  ),
);

The output of your Apache/nginx/system log in /var/log/____:

redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:05 -0400] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/?dir=/&fileid=140 HTTP/2.0" 303 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/?dir=/ HTTP/2.0" 200 8629 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/user_status/img/app.svg?v=6cec50e6 HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/js/dist/files_fileinfo.js?v=6cec50e6 HTTP/2.0" 200 8781 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/accessibility/js/accessibilityoca.js?v=6cec50e6 HTTP/2.0" 200 4080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_pdfviewer/js/files_pdfviewer-public.js?v=6cec50e6 HTTP/2.0" 200 7711 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_videoplayer/js/main.js?v=6cec50e6 HTTP/2.0" 200 3026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_sharing/js/dist/main.js?v=6cec50e6 HTTP/2.0" 200 652 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/js/fileinfomodel.js?v=6cec50e6 HTTP/2.0" 200 1316 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/federatedfilesharing/js/external.js?v=6cec50e6 HTTP/2.0" 200 1869 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/dashboard/img/dashboard.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_sharing/js/dist/files_sharing.js?v=6cec50e6 HTTP/2.0" 200 4253 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_trashbin/js/files_trashbin.js?v=6cec50e6 HTTP/2.0" 200 4622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_rightclick/js/script.js?v=6cec50e6 HTTP/2.0" 200 3300 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_sharing/js/dist/additionalScripts.js?v=6cec50e6 HTTP/2.0" 200 5308 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_rightclick/js/files.js?v=6cec50e6 HTTP/2.0" 200 1331 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/systemtags/js/systemtags.js?v=6cec50e6 HTTP/2.0" 200 4734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/firstrunwizard/js/about.js?v=6cec50e6 HTTP/2.0" 200 356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/firstrunwizard/img/info.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/text/js/viewer.js?v=6cec50e6 HTTP/2.0" 200 9320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/settings/img/users.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_sharing/js/dist/collaboration.js?v=6cec50e6 HTTP/2.0" 200 824 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/img/app.svg?v=6cec50e6 HTTP/2.0" 304 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/photos/img/app.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/activity/img/activity.svg?v=6cec50e6 HTTP/2.0" 304 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/settings/img/admin.svg?v=6cec50e6 HTTP/2.0" 304 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/settings/img/apps.svg?v=6cec50e6 HTTP/2.0" 304 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_pdfviewer/js/files_pdfviewer-main.js?v=6cec50e6 HTTP/2.0" 200 9561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_versions/js/files_versions.js?v=6cec50e6 HTTP/2.0" 200 10595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/settings/img/help.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/img/actions/logout.svg?v=6cec50e6 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/img/logo/logo.svg?v=1 HTTP/2.0" 304 40 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/js/dist/systemtags.js?v=6cec50e6 HTTP/2.0" 200 17352 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /avatar/rgb3/64?v=0 HTTP/2.0" 304 105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/img/actions/delete.svg HTTP/2.0" 200 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/comments/js/comments.js?v=6cec50e6 HTTP/2.0" 200 18915 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/js/dist/files-app-settings.js?v=6cec50e6 HTTP/2.0" 200 26530 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/js/dist/files_client.js?v=6cec50e6 HTTP/2.0" 200 41358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/recommendations/js/main.js?v=6cec50e6 HTTP/2.0" 200 53601 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/text/js/files.js?v=6cec50e6 HTTP/2.0" 200 67893 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/js/dist/unified-search.js?v=6cec50e6 HTTP/2.0" 200 146507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/user_status/js/user-status-menu.js?v=6cec50e6 HTTP/2.0" 200 153456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files/js/dist/sidebar.js?v=6cec50e6 HTTP/2.0" 200 166887 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/notifications/js/notifications-main.js?v=6cec50e6 HTTP/2.0" 200 223039 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/files_sharing/js/dist/files_sharing_tab.js?v=6cec50e6 HTTP/2.0" 200 280749 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /apps/viewer/js/viewer-main.js?v=6cec50e6 HTTP/2.0" 200 366410 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:07 -0400] "GET /core/js/dist/main.js?v=6cec50e6 HTTP/2.0" 200 440372 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:08 -0400] "GET /apps/notifications/img/notifications-new.svg HTTP/2.0" 304 63 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:08 -0400] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 200 317 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:08 -0400] "PUT /apps/user_status/heartbeat HTTP/2.0" 204 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /ocs/v2.php/search/providers?from=%2Fapps%2Ffiles%2F%3Fdir%3D%2F HTTP/2.0" 200 285 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /apps/updatenotification/img/notification.svg HTTP/2.0" 200 980 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /apps/systemtags/lastused HTTP/2.0" 200 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /apps/recommendations/api/recommendations HTTP/2.0" 200 78 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "PROPFIND /remote.php/dav/files/rgb3/ HTTP/2.0" 207 1244 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /ocs/v2.php/apps/user_status/api/v1/user_status HTTP/2.0" 200 191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /index.php/apps/files/ajax/getstoragestats.php?dir=%2F HTTP/2.0" 200 238 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"
redacted:443 XXX.XX.XX.XXX - - [16/Mar/2021:10:39:09 -0400] "GET /core/img/filetypes/folder.svg HTTP/2.0" 304 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:86.0) Gecko/20100101 Firefox/86.0"

Same here with 21. I get these all the time when editing the README.md files. Totally annoying.