i upgraded my nextcloud docker installation from nextcloud:29.0.9-apache to nextcloud:30.0.2-apache. Before everything was ok, after the upgrade the element app did not work any longer:
Dein Element ist falsch konfiguriert
Failed to construct ‘Worker’: Access to the script at ‘https://cloud.xxx.de/apps/riotchat/riot/bundles/1c4a7dc1375053e9cf63/playback.worker.js’ is denied by the document’s Content Security Policy.
nextcloud and matrix are running on different servers. When I access the matrix server directly via browser, everything is fine. Only when using it inside nextcloud the problem occurs.
Someone pointed me to a “solution”, but for me this is just a workaround, as it seems, I have to change that file with every new version. At least, currently the problem is solved with a change in custom_apps/riotchat/3rdparty/riot/index.html: Add the denied link to the line with script-src ‘self’ ‘wasm-unsafe-eval’: <meta http-equiv=“Content-Security-Policy” content="
default-src ‘none’;
style-src ‘self’ ‘unsafe-inline’ ;
script-src ‘self’ ‘wasm-unsafe-eval’ https://www.recaptcha.net/recaptcha/https://www.gstatic.com/recaptcha/https://cloud.xxx.de/apps/riotchat/riot/bundles/1c4a7dc1375053e9cf63/playback.worker.js;
img-src * blob: data:;
connect-src * blob:;
font-src ‘self’ data: ;
media-src * blob: data:;
child-src * blob: data:;
worker-src ‘self’ blob: ;
frame-src * blob: data:;
form-action ‘self’ ;