Skip to content

Filepicker Authorization Failure (CSP Error) #608

@audiorecorder

Description

@audiorecorder

I am currently using the filepicker V2, accessed via:
https://api.filestackapi.com/filestack.js

When I click the "Connect Google Drive" option, it navigates to the following staging URL, but the process stalls and does not proceed further:
https://www.filestackapi.com/api/client/googledrive/authStaging/saveas?key=xxxxxxx&id=1759914680162&iframe=true&version=v2&s=GOOGLEDRIVE,COMPUTER&container=modal&loc=GOOGLE%20DRIVE&language=en_us&plugin=js_lib&url=https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png&defaultSaveasName=logo.jpg&external=true

The browser console shows a Content Security Policy (CSP) error:
"Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword..."

Based on my investigation, this script error seems to be preventing the required automatic redirection to the final authorization URL, which should look like this:
https://www.filestackapi.com/api/client/googledrive/auth/saveas?loc=GOOGLE+DRIVE&container=modal&key=xxxxxxx&language=en_us&plugin=js_lib&url=https%3A%2F%2Fgithub.githubassets.com%2Fassets%2FGitHub-Mark-ea2971cee799.png&defaultSaveasName=logo.jpg&s=GOOGLEDRIVE%2CCOMPUTER&version=v2&external=true&iframe=true&id=1759914680162

Could you please investigate and resolve the CSP violation or script issue that is blocking the authorization flow for Picker V2 users on a paid plan?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions