Safari Only Issue - Content Security Policy

Developer Support CMS Development
1

Hello -

I have a hubspot form embedded on a page within our website and it is throwing the following error:

The source list for Content Security Policy directive ‘script-src’ contains an invalid source: ‘‘strict-dynamic’’. It will be ignored.

It will not allow the user to submit the form. It seems to only be broken on the forms that have the CAPTCHA added to it. Is there anyway to fix this? Does this need updated on HubSpot’s end?

Please let me know if there is a workaround for this.

Thank you!

2

Hi @ngalek

Could you post a link to a page with this issue so the community can check it out?

3

Hi @dennisedson -

Thank you! The issue can be seen on this page: https://www.recesscreative.com/people/summer-design-intern I have only been able to reproduce in Safari - seems to have to do with the google recaptcha + hubspot form together.

Thanks,

Nicole

4

Thanks for adding the link!

I did surface this issue related to the safari error.

I also noticed that you had another error indicating hbspt is not definied :thinking:

@tjoyce @Kevin-C do you all have thoughts on this?

5

Hey @dennisedson and @ngalek

Similar to your find Dennis!

Both indicate that this won’t prevent the resource from being loaded. Correct me if I’m wrong @dennisedson @tjoyce

To Dennis’ point, you’re referencing the method before it has been loaded:

41412i4795E1B9728EEEAC.png
41412i4795E1B9728EEEAC.png400×103 29 KB

Try wrapping this script in a document ready function.

6

Thank you!