Show in browser JavaScript error: Uncaught EvalError:

[JulyLies]

Description

Show in browser is JavaScript error: Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self' http: https: data: blob: 'unsafe-inline'".
(https://git.huangdf.xyz/assets/js/index.js?v=1.18.0~rc1 @ 12:47048). Open browser console to see more details.

Screenshots

Gitea Version

1.18.0+rc1

Can you reproduce the bug on the Gitea demo site?

No

Operating System

win11

Browser Version

Microsoft Edge(107.0.1418.56) Google Chrome( 107.0.5304.107)

[silverwind]

You are serving Gitea through an proxy that adds a incompatible CSP header to responses.

CSP compatibility is a goal, but I don't expect it to be fully fixed anytime soon. See

#19851
#305