Login Page Not Loading Due to CSP Issue in Firefox

Cristiano Bini shared this problem ago

Published

I am experiencing an issue when trying to log in at login.mailbox.org using Firefox. The page gets stuck on the loading screen (.fullpage-loader), preventing access to the mailbox.

After inspecting the developer console, I found a Content-Security-Policy (CSP) error, which blocks inline event handlers (script-src-attr). The error message in the console is:

Content-Security-Policy: The page’s settings blocked the execution of an event handler (script-src-attr) because it violates the following directive: “script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-...'”
Source: history.back();return false;

This issue does not occur in other browsers (e.g., Chrome, Edge), suggesting that Firefox enforces CSP more strictly. It appears that JavaScript required to hide the full-page loader is not executing due to this restriction, leaving the page unusable.

The same problem 0

Replies (2)

regnier nathalie ●

I'm also having problems with the settings page. I can't create aliases because the settings are in English one minute and German the next.

Reloading the page doesn't solve anything, and I can't use Deepl to translate it.

Reply URL

zapata ●

There is a problem when you logged out and later try to login again without closing the tab/window/browser. Not sure if this is what you experience. And the language issue is another bug.

ClownComputing.

Reply URL