Gelbooru

Notice: We are now selling NEW Gelbooru Merch~! Domestic shipping is free on all orders! Do you have an artist tag on Gelbooru? Let us know so we can properly credit you!

Ticket Information - ID: #1327


ID:Category:SeverityReproducibilityDate SubmittedUpdated By:
0001327Bug Reportingnormalalways05/03/24 06:18PMlozertuser
Reporterbubo_virginianus
Assigned to:geltas
Resolution:Resolved
View StatusPublic
Version:
Target Version:N/A
Summary:Content security policy is preventing what I assume is your own ads from loading.
Description:Your Content Security Policy is blocking several scripts. I no longer see any third party adds on Gelbooru. I have checked that my addblocker is disabled. I'm assuming this is a mistake.
Additional Info:index.php:1 Refused to load the script 'https://a.realsrv.com/ad-provider.js' because it violates the following Content Security Policy directive: "script-src 'self' '*' 'unsafe-inline' *.gstatic.com *.google.com *.googleapis.com *.bootstrapcdn.com". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

index.php:1 Refused to load the script 'https://a.magsrv.com/ad-provider.js' because it violates the following Content Security Policy directive: "script-src 'self' '*' 'unsafe-inline' *.gstatic.com *.google.com *.googleapis.com *.bootstrapcdn.com". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

index.php:1 Refused to load the script 'https://creative.xlivrdr.com/widgets/Spot/lib.js' because it violates the following Content Security Policy directive: "script-src 'self' '*' 'unsafe-inline' *.gstatic.com *.google.com *.googleapis.com *.bootstrapcdn.com". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
lozertuser replied at 2024-05-04 18:54:33
Doesn't appear to be an issue for any other person, all browsers work on my end, so it's likely just on your end, possibly security settings set for your particular browser through extensions or other things.