Content Security Policy failing on line 1 (Firefox 57.0)

user_9016781 0
Viewed 880

I am using the following Content Security Policy in Report-Only mode:

Content-Security-Policy-Report-Only "default-src 'self'; report-uri /log_violations"

When I go to a URL on the server with an HTML page containing the following: 

<!DOCTYPE html>
<head>
  <title>
    Test document
  </title>
</head>
<html>
  <body>
    Hello
  </body>
</html>

I am seeing the following error message in Firefox 57.0 on line 1:

Content Security Policy: The page’s settings observed the loading of a 
resource at self (“default-src http://www3.thestar.com”). A CSP report
is being sent. Source: ;!function(){var t=0,e=function(t,e){ret...

In other browsers, like Edge, Chrome, I haven't seen these errors.

Any thoughts on whether this is a Firefox quirk or something I've set up incorrectly? I'm stumped as to why the policy is rejecting line 1 of every page.

content-security-policy firefox
1 Answers
Related