website doesn't load
- Dominant language
- HTML
- Stars
- 20.5k
- Forks
- 2.9k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 95
Description
#This issue also works for requesting features.
**Describe the issue**
The website doesn't load in chrome. Getting several errors in chrome browser...
```
Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-XPW1QSKFW4' because it violates the following Content Security Policy directive: "script-src 'report-sample' 'nonce-ty9j_h4-5zhpgpfvrpfc1g' 'unsafe-inline' 'strict-dynamic' https: http:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.```
```
fonts.google.com/:1 Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-XPW1QSKFW4' because it violates the following Content Security Policy directive: "script-src 'report-sample' 'nonce-ty9j_h4-5zhpgpfvrpfc1g' 'unsafe-inline' 'strict-dynamic' https: http:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
```
```
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'report-sample' 'nonce-ty9j_h4-5zhpgpfvrpfc1g' 'unsafe-inline' 'strict-dynamic' https: http:". Note that 'unsafe-inline' is ignored if either a hash or nonce value is present in the source list.
```
```Refused to load the script 'https://www.gstatic.com/_/fonts/_/js/k=fonts.app.en_US.F0hl6zozqb8.es6.O/d=1/br=1/rs=AE60u5frCb2dETWibqmRX4QfZ0tqcFxYMw/m=core' because it violates the following Content Security Policy directive: "script-src 'report-sample' 'nonce-ty9j_h4-5zhpgpfvrpfc1g' 'unsafe-inline' 'strict-dynamic' https: http:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback
```
```
fonts.google.com/:1 Refused to load the script 'https://ssl.gstatic.com/external_hosted/lottie/lottie_light.js' because it violates the following Content Security Policy directive: "script-src 'report-sample' 'nonce-ty9j_h4-5zhpgpfvrpfc1g' 'unsafe-inline' 'strict-dynamic' https: http:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
```
**To Reproduce**
Go to google fonts through chrome.
**Expected behavior**
The pages load
**Additional context**
Mac, OS 12.7
Chrome Version 116.0.5845.187
Contributor guide
Assessment
This issue has not been assessed yet.