9.1 Files Page Not Loading After Login and No Navigation, Apache



OS Ubuntu 16.04
OC 9.1.0
Apache 2.4.18
PHP 7.0.8

The Web Gui is broken and I'm quit sure, it already worked in this
environment. I upgraded to Ubuntu 16.04 a few weeks ago from 14.04.
I can't see my files or e.g. my contacts, see screenshot.
Access via Android app or WebDav and syncing with the Windows tool works without any problems.


Check your browser error console.


Thanks, that did it.

As a workaroud I set the HTTP header "Content-Security-Policy" to 'self' 'unsafe-eval' for the moment.

Is it possible to make this more secure? observatory.mozilla.org tells me, 'unsafe-eval' is not the best solution.


oC is setting and using a secure CSP by default. If this set different and is showing issues like this the probably some enabled 3rdparty apps are messing around with the default CSP.


I'm having the same issue and found many people blaming apps. However, I'm certain that's not the case, so I'd like to add my two cents to the discussion. I tried disabling all apps, even though I had no 3rd party apps in the first place. So I disabled all apps that I could and it did not help. What helped was uncommenting the following setting in my apache2.conf:

Header set Content-Security-Policy "default-src 'self';"



thanks for posting this note. Where is this setting coming from? This is mostly not a default setting of Apache and shouldn't be configured globally.


Created the following issue. Maybe ownCloud can warn a user if such a wrong configured CSP is used.


I configured it manually and globally as it is recommended to secure a web server.
When i have some time i will try to exclude only oC by using e.g. virtual hosts.



this is unrelated then so please create a new thread in the oC Server category and make sure that you're filling out the template shown there.