Skip to content

website with csp header require-trusted-types-for 'script' don't work after release of chrome 83 #13228

@tipra34

Description

@tipra34

Bug report

Describe the bug

script loading does not work for site with csp header require-trusted-types-for 'script' don't work after release of chrome 83.

this disables assigning of script.src to unsafe url (non trusted types)
[bug location] (https://github.com/zeit/next.js/blob/7eaf9b8bab4e93b891be89704399644eafe70e21/packages/next/client/page-loader.js#L265)

To Reproduce

Steps to reproduce the behavior, please provide code snippets or a repository:

  1. use chrome 83.
  2. goto here
  3. Click on the only link available on screen with text: clicking here will also not work
  4. See error on console

Expected behavior

it should work normally

Screenshots

screenshot

System information

  • OS: [ macOS, Windows]
  • Browser chrome
  • Version of Next.js: 9.X

Additional context

related blog

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueEasy to fix issues, good for newcomers

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions