9.1 Files Page Not Loading After Login and No Navigation, Apache

Server
,
1

OS Ubuntu 16.04
OC 9.1.0
Apache 2.4.18
PHP 7.0.8

The Web Gui is broken and I'm quit sure, it already worked in this
environment. I upgraded to Ubuntu 16.04 a few weeks ago from 14.04.
I can't see my files or e.g. my contacts, see screenshot.
Access via Android app or WebDav and syncing with the Windows tool works without any problems.

1 Like
2

Check your browser error console.

3

Thanks, that did it.

As a workaroud I set the HTTP header "Content-Security-Policy" to 'self' 'unsafe-eval' for the moment.

Is it possible to make this more secure? observatory.mozilla.org tells me, 'unsafe-eval' is not the best solution.

1 Like
4

oC is setting and using a secure CSP by default. If this set different and is showing issues like this the probably some enabled 3rdparty apps are messing around with the default CSP.

5

I'm having the same issue and found many people blaming apps. However, I'm certain that's not the case, so I'd like to add my two cents to the discussion. I tried disabling all apps, even though I had no 3rd party apps in the first place. So I disabled all apps that I could and it did not help. What helped was uncommenting the following setting in my apache2.conf:

Header set Content-Security-Policy "default-src 'self';"

1 Like
6

Hi,

thanks for posting this note. Where is this setting coming from? This is mostly not a default setting of Apache and shouldn't be configured globally.

7

Created the following issue. Maybe ownCloud can warn a user if such a wrong configured CSP is used.

1 Like
8

I configured it manually and globally as it is recommended to secure a web server.
When i have some time i will try to exclude only oC by using e.g. virtual hosts.

10

Hi,

this is unrelated then so please create a new thread in the oC Server category and make sure that you're filling out the template shown there.