{"action":"created","issue":{"url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/235","repository_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues","labels_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/235/labels{/name}","comments_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/235/comments","events_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/235/events","html_url":"https://github.com/uBlockOrigin/uBlock-issues/issues/235","id":362665380,"node_id":"MDU6SXNzdWUzNjI2NjUzODA=","number":235,"title":"content-security-policy set by twitter.com causes injected scriptlets to not run","user":{"login":"anvakl","id":34994045,"node_id":"MDQ6VXNlcjM0OTk0MDQ1","avatar_url":"https://avatars3.githubusercontent.com/u/34994045?v=4","gravatar_id":"","url":"https://api.github.com/users/anvakl","html_url":"https://github.com/anvakl","followers_url":"https://api.github.com/users/anvakl/followers","following_url":"https://api.github.com/users/anvakl/following{/other_user}","gists_url":"https://api.github.com/users/anvakl/gists{/gist_id}","starred_url":"https://api.github.com/users/anvakl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anvakl/subscriptions","organizations_url":"https://api.github.com/users/anvakl/orgs","repos_url":"https://api.github.com/users/anvakl/repos","events_url":"https://api.github.com/users/anvakl/events{/privacy}","received_events_url":"https://api.github.com/users/anvakl/received_events","type":"User","site_admin":false},"labels":[{"id":925574023,"node_id":"MDU6TGFiZWw5MjU1NzQwMjM=","url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/labels/Firefox","name":"Firefox","color":"13688c","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-21T15:24:28Z","updated_at":"2018-09-21T16:05:48Z","closed_at":null,"author_association":"NONE","body":"<!-- Do NOT delete this template or any part of it when submitting your issue -->\r\n\r\n### Prerequisites\r\n\r\n<!-- Check the appropriate boxes after you submit your issue -->\r\n<!-- Speculated performance issues will be marked as invalid and closed if they do not come with actual profiling data + analysis supporting the claim -->\r\n<!-- Opening issues for adding new filter lists is now disallowed and such issues will be declined and closed -->\r\n\r\n- [x] I verified that this is not a filter issue\r\n    - Filter issues MUST be reported at [filter issue tracker](https://github.com/uBlockOrigin/uAssets/issues)\r\n    <!--\r\n        - If disabling uBO <https://github.com/gorhill/uBlock/wiki/Quick-guide:-popup-user-interface#the-large-power-button> makes the issue go away, then in all likelihood this is a filter issue.\r\n        - See what the logger <https://github.com/gorhill/uBlock/wiki/The-logger> reports when you reproduce the issue, this will help you determine whether this is a filter issue.\r\n    -->\r\n- [x] This is not a support issue or a question\r\n    - Support issues and questions are handled at [/r/uBlockOrigin](https://old.reddit.com/r/uBlockOrigin/)\r\n    <!-- Such issue will be closed as invalid -->\r\n- [ ] I performed a cursory search of the issue tracker to avoid opening a duplicate issue\r\n    - Your issue may already be reported.\r\n- I tried to reproduce the issue when...\r\n    - [x] uBlock Origin is the only extension\r\n    - [ ] uBlock Origin with default lists/settings\r\n    - [ ] using a new, unmodified browser profile\r\n- [ ] I am running the latest version of uBlock Origin\r\n- [ ] I checked the [documentation](https://github.com/gorhill/uBlock/wiki) to understand that the issue I report is not a normal behavior\r\n\r\n### Description\r\n\r\ncontent security policy set by twitter doesnot allow inline scripts without` nonce=` attribute to run.\r\n\r\ncsp set by twitter is\r\n\r\n`“script-src https://connect.facebook.net https://cm.g.doubleclick.net https://ssl.google-analytics.com https://graph.facebook.com https://twitter.com 'unsafe-eval' https://*.twimg.com https://api.twitter.com https://analytics.twitter.com https://publish.twitter.com https://ton.twitter.com https://syndication.twitter.com https://www.google.com https://t.tellapart.com https://platform.twitter.com https://www.google-analytics.com blob: 'nonce-P+pysraZ1bM1TVgufAjzPw==' https://twitter.com”`\r\n\r\nI got that from beowser console. \r\n\r\n### A specific URL where the issue occurs\r\n\r\nhttps://twitter.com/gorhill\r\n\r\n### Steps to Reproduce\r\n\r\n1. Create a rule `twitter.com##+js(addEventListener-logger.js)`\r\n2. open https://twitter.com/gorhill\r\n3. open browser console to see log.\r\n\r\n### Expected behavior:\r\n\r\nScriptlet logs all event listeners\r\n\r\n### Actual behavior:\r\n\r\nGet an error saying : Content Security Policy: The page’s settings blocked the loading of a resource at self\r\n\r\nPalemoon displays full csp.\r\nFirefox says it is because of script-src\r\n\r\n### Your environment\r\n\r\nFirefox 60 ESR with uBlock1.16.21rc1\r\nPalemoon 28.1 with uBlock-legacy1.16.4.4\r\n\r\nWindows 8.1 x64\r\n"},"comment":{"url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/comments/423587330","html_url":"https://github.com/uBlockOrigin/uBlock-issues/issues/235#issuecomment-423587330","issue_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/235","id":423587330,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMzU4NzMzMA==","user":{"login":"uBlock-user","id":21290713,"node_id":"MDQ6VXNlcjIxMjkwNzEz","avatar_url":"https://avatars2.githubusercontent.com/u/21290713?v=4","gravatar_id":"","url":"https://api.github.com/users/uBlock-user","html_url":"https://github.com/uBlock-user","followers_url":"https://api.github.com/users/uBlock-user/followers","following_url":"https://api.github.com/users/uBlock-user/following{/other_user}","gists_url":"https://api.github.com/users/uBlock-user/gists{/gist_id}","starred_url":"https://api.github.com/users/uBlock-user/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uBlock-user/subscriptions","organizations_url":"https://api.github.com/users/uBlock-user/orgs","repos_url":"https://api.github.com/users/uBlock-user/repos","events_url":"https://api.github.com/users/uBlock-user/events{/privacy}","received_events_url":"https://api.github.com/users/uBlock-user/received_events","type":"User","site_admin":false},"created_at":"2018-09-21T16:05:48Z","updated_at":"2018-09-21T16:05:48Z","author_association":"MEMBER","body":"Browser bug - \r\n\r\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1267027\r\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=866522"}}
{"actor":{"display_login":"uBlock-user"}}