Suddenly, both Grok and DuckDuckGo became inaccessible, appearing as a black screen or failing to load completely.

[fatinghenji]

Suddenly, both Grok and DuckDuckGo became inaccessible, appearing as a black screen or failing to load completely.

[SaylorAdam]

add Gemini.google.com/app to that list.

Removing unpermitted intrinsics lockdown-install.js:1:87038
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src 'report-sample' 'nonce-JGExYkgYTZ6_frcHlQ9eSA' 'unsafe-inline' 'unsafe-eval'” inpage.js:1:374070
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:1:1880
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:1:73852
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:1:314445
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:42:76
Content-Security-Policy: (Report-Only policy) The page’s settings would block a script (script-src-elem) at https://www.googletagmanager.com/gtm.js?id=GTM-KKRLL9S from being executed because it violates the following directive: “script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googleadservices.com/pagead/conversion/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.google.com/js/bg/ https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js https://www.gstatic.com/monaco_editor/ https://fonts.gstatic.com/s/e/notoemoji/search/wrapper.js https://www.youtube.com/iframe_api https://translate.google.com/translate_a/element.js https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://maps.googleapis.com/maps/api/js https://www.gstatic.com/_/mss/boq-bard-web/_/js/k=boq-bard-web.BardChatUi.en_US.M-oLpgk6-T0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/” gemini.google.com
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:42:2790
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:42:4739
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” sandbox eval code:101:36
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src 'report-sample' 'nonce-JGExYkgYTZ6_frcHlQ9eSA' 'unsafe-inline' 'unsafe-eval'” sandbox eval code:101:36
SES_UNCAUGHT_EXCEPTION: undefined lockdown-install.js:1:135422
Content-Security-Policy: The page’s settings blocked an inline script (script-src-elem) from being executed because it violates the following directive: “script-src * 'unsafe-inline' 'unsafe-eval' blob: data: 'nonce-bW96LWV4dGVuc2lvbjovLzI2ZDUyMzgwLWU2YmUtNDAzOC1iZmJjLTE1NDA4MzM1NTYyOC8='” gemini.google.com:60:656
[obsidian-web-clipper]: Loaded content-script.js:3:16205
[obsidian-web-clipper:shortcut:register] 
Array(3) [ {…}, {…}, {…} ]
content-script.js:3:15989
The resource at “https://www.gstatic.com/_/mss/boq-bard-web/_/js/k=boq-bard-web.BardChatUi.en_US.M-oLpgk6-T0.es5.O/ck=boq-bard-web.BardChatUi.C4xf6TidgPI.L.B1.O/am=n0Ow4Oj_3t7uf885BqACwA/d=1/exm=_b/excm=_b/ed=1/wt=2/ujg=1/rs=AL3bBk0eG9QHOEBXh6f9NBRhW4ppnbf-UQ/m=LQaXg?wli=BardChatUi.jOkM3UxtfRU.loadWasmSipCoca.O%3A%3B” preloaded with link preload was not used within a few seconds. Make sure all attributes of the preload tag are set correctly. gemini.google.com

Script-src and inline scripts being blocked in Gemini, Duckduckgo

[fatinghenji]

#6568 (comment)