"Login with sr.ht" breaks on Chromium due to form-action CSP #30

emersion commented 2025年12月28日 12:54:40 +01:00

Created by refi64 on 2025年07月28日 02:03:51

If I press "Login with sr.ht", nothing happens, and I see this in the browser log:

Refused to send form data to 'https://yojo.emersion.fr/redirect-srht?' because it violates the following Content Security Policy directive: "form-action 'self'".

This seems to be a known thing:

Can the form-action redirect to another url?
[...] Currently Firefox allows the redirect, while Chrome and Safari will block them.

I can workaround it by visiting the redirect URL manually.

_Created by [refi64](https://todo.sr.ht/~refi64) on 2025年07月28日 02:03:51_ If I press "Login with sr.ht", nothing happens, and I see this in the browser log: ``` Refused to send form data to 'https://yojo.emersion.fr/redirect-srht?' because it violates the following Content Security Policy directive: "form-action 'self'". ``` This seems to be a [known thing](https://content-security-policy.com/form-action/): > Can the form-action redirect to another url? > [...] Currently Firefox allows the redirect, while Chrome and Safari will block them. I can workaround it by visiting the redirect URL manually.

emersion commented 2025年12月28日 12:54:41 +01:00

Created by refi64 on 2025年07月28日 02:04:45

It actually also affects the codeberg login like too, just forgot to mention above.

_Created by [refi64](https://todo.sr.ht/~refi64) on 2025年07月28日 02:04:45_ It actually also affects the codeberg login like too, just forgot to mention above.

emersion commented 2025年12月28日 12:54:41 +01:00

Created by bl on 2025年12月12日 18:11:24

I am also having this problem.

_Created by [bl](https://todo.sr.ht/~bl) on 2025年12月12日 18:11:24_ I am also having this problem.