Nextcloud attachements fail loading #152

Closed
opened 2026-04-08 16:41:51 +02:00 by ahtlon · 4 comments
Owner
No description provided.
ahtlon added the Bug/Problem nextcloud labels 2026-04-08 16:41:51 +02:00
Author
Owner
grafik.png Looking at the network tab, this seems a problem not with nextcloud but the proxy maybe. The requests for the previews get blocked by CSP

Content-Security-Policy: Die Einstellungen der Seite haben das Laden einer Ressource (img-src) auf http://cloud.malobeo.org/apps/text/mediaPreview?documentId=920&mediaFileName=bizhub-c258-datasheet.pdf blockiert, da sie gegen folgende Direktive verstößt: "img-src 'self' data: blob: https://*.tile.openstreetmap.org"

<img width="1510" alt="grafik.png" src="attachments/313deaa7-bf4c-4ba3-ae11-3b7e1b9a37f6"> Looking at the network tab, this seems a problem not with nextcloud but the proxy maybe. The requests for the previews get blocked by CSP `Content-Security-Policy: Die Einstellungen der Seite haben das Laden einer Ressource (img-src) auf http://cloud.malobeo.org/apps/text/mediaPreview?documentId=920&mediaFileName=bizhub-c258-datasheet.pdf blockiert, da sie gegen folgende Direktive verstößt: "img-src 'self' data: blob: https://*.tile.openstreetmap.org"`
Owner

I dont think this is due to proxy settings since the error states that only image data from 'openstreetmap.org' is expected. This certainly is not configured by us but must be some problem within nextcloud source code, or within the nixos module we use for nextcloud.

Or there is a misconfiguration in our instances that makes the nextcloud belive pdf/images would be map data.

I dont think this is due to proxy settings since the error states that only image data from 'openstreetmap.org' is expected. This certainly is not configured by us but must be some problem within nextcloud source code, or within the nixos module we use for nextcloud. Or there is a misconfiguration in our instances that makes the nextcloud belive pdf/images would be map data.
Owner

Ah also it requests from http not https which could be the problem.

Ah also it requests from http not https which could be the problem.
kalipso self-assigned this 2026-04-14 12:53:38 +02:00
Owner

Jep, http was the problem. Fixed in c40d84ba4d

Jep, http was the problem. Fixed in https://git.dynamicdiscord.de/malobeo/infrastructure/commit/c40d84ba4d9ebc716e0ecf83244c5d5f290e1586
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: malobeo/infrastructure#152