-
Notifications
You must be signed in to change notification settings - Fork 87
Description
I am currently using the filepicker V2, accessed via:
https://api.filestackapi.com/filestack.js
When I click the "Connect Google Drive" option, it navigates to the following staging URL, but the process stalls and does not proceed further:
https://www.filestackapi.com/api/client/googledrive/authStaging/saveas?key=xxxxxxx&id=1759914680162&iframe=true&version=v2&s=GOOGLEDRIVE,COMPUTER&container=modal&loc=GOOGLE%20DRIVE&language=en_us&plugin=js_lib&url=https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png&defaultSaveasName=logo.jpg&external=true
The browser console shows a Content Security Policy (CSP) error:
"Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword..."
Based on my investigation, this script error seems to be preventing the required automatic redirection to the final authorization URL, which should look like this:
https://www.filestackapi.com/api/client/googledrive/auth/saveas?loc=GOOGLE+DRIVE&container=modal&key=xxxxxxx&language=en_us&plugin=js_lib&url=https%3A%2F%2Fgithub.githubassets.com%2Fassets%2FGitHub-Mark-ea2971cee799.png&defaultSaveasName=logo.jpg&s=GOOGLEDRIVE%2CCOMPUTER&version=v2&external=true&iframe=true&id=1759914680162
Could you please investigate and resolve the CSP violation or script issue that is blocking the authorization flow for Picker V2 users on a paid plan?