[GH-ISSUE #2988] CSP viomation error #38677

Closed
opened 2026-07-17 06:04:58 -05:00 by GiteaMirror · 2 comments
Owner

Originally created by @zoic21 on GitHub (Dec 15, 2022).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/2988

Subject of the issue

Issue when I want to download attach file (on webapp and android app) due to CSP violation

Deployment environment

  • vaultwarden version: 1.26.0

  • Install method: Docker

  • Clients used: web vault

  • Reverse proxy and version: nginx, I don't known the version

  • MySQL/MariaDB or PostgreSQL version: by default

  • Other relevant details:

Steps to reproduce

Try to donwload attach file

Expected behaviour

Get my file

Actual behaviour

Turn indefinitely

Troubleshooting data

image

Originally created by @zoic21 on GitHub (Dec 15, 2022). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/2988 ### Subject of the issue Issue when I want to download attach file (on webapp and android app) due to CSP violation ### Deployment environment * vaultwarden version: 1.26.0 * Install method: Docker * Clients used: web vault * Reverse proxy and version: nginx, I don't known the version * MySQL/MariaDB or PostgreSQL version: by default * Other relevant details: ### Steps to reproduce Try to donwload attach file ### Expected behaviour Get my file ### Actual behaviour Turn indefinitely ### Troubleshooting data ![image](https://user-images.githubusercontent.com/1536036/207782147-a233c811-cd10-43fc-a7b5-34bddeceb83b.png)
Author
Owner

@BlackDex commented on GitHub (Dec 15, 2022):

Are you sure you configured the domain correctly?
Please check the /admin interface and go to the diagnostics page.
Verify if all is ok.

This should work because the domain on which your instance is running is always allowed.

<!-- gh-comment-id:1352657228 --> @BlackDex commented on GitHub (Dec 15, 2022): Are you sure you configured the domain correctly? Please check the `/admin` interface and go to the diagnostics page. Verify if all is ok. This should work because the domain on which your instance is running is always allowed.
Author
Owner

@zoic21 commented on GitHub (Dec 15, 2022):

Hello,

Really sorry for the bother, I try to pay attention to this kind of thing. I must not have been awake...

<!-- gh-comment-id:1352987822 --> @zoic21 commented on GitHub (Dec 15, 2022): Hello, Really sorry for the bother, I try to pay attention to this kind of thing. I must not have been awake...
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#38677