staging-jenkins is not usable from Firefox ------------------------------------------ Key: OVIRT-2271 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-2271 Project: oVirt - virtualization made easy Issue Type: Outage Components: Staging infra Reporter: Barak Korren Assignee: Evgheni Dereveanchin Priority: Highest The staging-jenkins instance is not usable from Firefox ATM, job editing forms never finish loading, pages like the Script Console to not get drawn properly and generally it seems that any operation that involves writing data to Jenkins fails in one way or another. The reason behind these issues seems to be that clinet-side JavaScript is not running. Looking at then script console in FireFox shows the following error: {quote} Content Security Policy: The page’s settings blocked the loading of a resource at self (“default-src https://jenkins-staging.phx.ovirt.org 'unsafe-inline' https://cdnjs.cloudflare.com”). Source: call to eval() or related function blocked by CSP. {quote} So it seems that some recent changes we've made to the Jenkins CSP are breaking Jenkins itself on FireFox. For some reason this does not seem to be affecting Chrome.