Re: Google sites don't work

[Kent West <westk@acu.edu>]

On Mon, Aug 2, 2021 at 7:52 AM Ivan Krylov <krylov.r00t@gmail.com> wrote:

> Similar problem here, only with Google sites like Gmail, Docs, and
> Chat (via a[n?] university/Google system).

Interesting. Do you see any relevant errors if you press F12 and take a
look at the _javascript_ console on the affected pages, compared to the
unaffected pages? What about the Network tab, any failed requests there?

--
Best regards,
Ivan

When press F12, and then click on the "Console" tab, I get the following, which means nothing to me:

Some cookies are misusing the recommended “SameSite“ attribute 105

Some cookies are misusing the recommended “SameSite“ attribute 24

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src or style-src: nonce-source or hash-source specified

Content Security Policy: Ignoring ‘x-frame-options’ because of ‘frame-ancestors’ directive.

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src or style-src: nonce-source or hash-source specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src or style-src: nonce-source or hash-source specified

Content Security Policy: Ignoring ‘x-frame-options’ because of ‘frame-ancestors’ directive.

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “'unsafe-inline'” within script-src or style-src: nonce-source or hash-source specified

Empty string passed to getElementById(). 3 m=b:1168:137

Empty string passed to getElementById(). 6 m=b:1168:137

Empty string passed to getElementById(). 2 m=b:1168:137

Empty string passed to getElementById(). 2 m=b:1168:137

Empty string passed to getElementById(). 9 m=b:1168:137

Empty string passed to getElementById(). m=b:1168:137

Empty string passed to getElementById(). m=b:1168:137

Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified

Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

Empty string passed to getElementById(). 6 m=b:1168:137

Empty string passed to getElementById(). 3 m=b:1168:137

Empty string passed to getElementById().

Also, another symptom; generally, if I restart the computer, and fire up Firefox, and go to the offending sites, they'll work for 15, 30 minutes, and then start complaining about not being able to connect, and I can no longer go directly to the URLs for those pages. Clearing the cache/cookies doesn't help, 

but just now when I tried clearing cache/cookies again, and still had the F12 Console open, I'm seeing things like this:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://ssl.gstatic.com/dynamite/images/cleardot.gif?zx=aojuhxxm7pdi. (Reason: CORS request did not succeed).

--

Kent West                    <")))><
Westing Peacefully - http://kentwest.blogspot.com