Content Security Policy problems

By martin_porter on 5 Aug 2016 at 08:34 UTC

I am new to Drupal and have recently done 3 installs of Drupal 8.1.7/8 and came across an interesting problem: on my local development install and personal web pages all seems OK but on another site, which unlike the others uses SSL, the CKEditor reffuses to show. Same result on different Win10 PCs using ff47, ff48 and ie11.

Firefox logged the following messages:
Error: call to Function() blocked by CSP ....... ckeditor.js:298:181
Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://*****bigband.com").ckeditor.js:298
TypeError: CKEDITOR.skinName is undefined ........ ckeditor.js:459:473

Any help appreciated

A CMS without content is :-(

Comments

=-=

VM commented 6 August 2016 at 19:14

and if SSL is disabled does functionality return?

Have you tested in another browser?

I have also tried the

martin_porter commented 7 August 2016 at 03:19

I have also tried the following with same results:
WinXP with FF41, FF43 and FF48,
Android 5.1 (phone) default browser
but
WinXP and IE8 just couldn't find the website at all !
iPad(8?) gave a usable text edit box instead of CKEditor - even on my "good" site.