Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-94464

QWebEngine: Unrecognized Content-Security-Policy directive 'require-trusted-types-for'

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P2: Important
    • None
    • 5.12.7, 5.15.0, 5.15.2
    • WebEngine
    • None
    • Linux/X11

    Description

      When trying to login to Google (other websites may also be affected) the WebEngine logs a Unrecognized Content-Security-Policy directive 'require-trusted-types-for' error message and the web site rejects the login.

      This can be reproduced with the simplebrowser example delivered with QWebEngine.

      I did the following:

      • Build the simplebrowser example without any modifications
      • Run simplebrowser
      • Go to https://www.google.com
      • Open Web Inspector in new window
      • Click "Sign in"
      • Enter user name (e-mail)

      I expect

      • That the web site asks for my password

      What happens

      • The web site denies the request, complaining about the security of the browser:
        "This browser or app is probably insecure"
      • The web console of the Web Inspector displays the error message
        "Unrecognized Content-Security-Policy directive 'require-trusted-types-for'.  bscframe:1"

      The problem occurs on the platforms listed above, but may not be limited to those.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            qt_webengine_team Qt WebEngine Team
            letsfindaway Martin Winter
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes