Login Page Not Loading Due to CSP Issue in Firefox
Published
I am experiencing an issue when trying to log in at login.mailbox.org using Firefox. The page gets stuck on the loading screen (.fullpage-loader), preventing access to the mailbox.
After inspecting the developer console, I found a Content-Security-Policy (CSP) error, which blocks inline event handlers (script-src-attr). The error message in the console is:
Content-Security-Policy: The page’s settings blocked the execution of an event handler (script-src-attr) because it violates the following directive: “script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-...'” Source: history.back();return false;This issue does not occur in other browsers (e.g., Chrome, Edge), suggesting that Firefox enforces CSP more strictly. It appears that JavaScript required to hide the full-page loader is not executing due to this restriction, leaving the page unusable.
Access denied
No connection
Real-time notifications may not work
Replies have been locked on this page!