Support

Please look at the bottom of this page (under Support Policy Summary) for our support policy summary, containing important information regarding our working hours and our support policy. Thank you!

Hello,

I have a problem with a simple html file that loads a IN5 script in order to show an animation. When I replace the .htaccess created by AdminTools with the basic one of Joomla, everything works fine. So it is surely a misconfiguration of my setting but I don't know where.

The errors are:

[Error] Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy. (BIR_Annual_Report_2021_final, line 1)

[Error] Refused to load https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy. (BIR_Annual_Report_2021_final, line 1)

[Error] Refused to load https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/assets/js/vmouse.min.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to load https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/assets/js/jquery.anythingslider.min.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to load https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/assets/js/jquery.touchSwipe.min.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to load https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/assets/js/in5.config.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to load https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/assets/js/in5.viewer.js because it does not appear in the script-src directive of the Content Security Policy.

[Error] Refused to apply a stylesheet because its hash, its nonce, or 'unsafe-inline' appears in neither the style-src directive nor the default-src directive of the Content Security Policy. (BIR_Annual_Report_2021_final, line 1, x1364)

Thank you for your suggestions

Thank you Nicholas,

I already tried that one but then I had an error 403.

So I put the same folder on the next option "Allow direct access, including .php files, to these directories" and the 403 error went off but I had then the error I was explaining in my original message.

So what do you suggest without compromising my security?

I understand well what you explain but it exactly what I did.

When I put https://www.bir.org/images/BIR_Publications in “Allow direct access, including .php files, to these directories”

If I am trying to access https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final the scripts are blocked. but when I am surfing to https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/index.html it is working fine.

When I put https://www.bir.org/images/BIR_Publications in “Allow direct access, except .php files, to these directories”

If I am trying to access https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final error 403. but when I am surfing to https://www.bir.org/images/BIR_Publications/BIR_Annual_Report_2021_final/index.html it is working fine.

The problem is like that with both Safari and Chrome on my Mac

So I will change the link by adding index.html in order to avoid problems.

It's a mistake in my message because I copied the link in your message.

It is of course images/BIR_Publications that I have put in the box.

Here is a screenshot.