"this page has a content security plicy that prevents it from being emedded in this way" Topic is solved

[postbuz]

Hi,

All of a sudden, many sites give me a "this page has a content security policy that prevents it from being emedded in this way" pop-up. Even this site...
I've tried safe mode, but that gives me the same. I'm baffled
Any idea how to get my favorite browser behaving again? I understood it was a server side issue, but I do not it's likely that a selection of servers have been reconfigured overnight, including this one

Kind Regards,

PB.

[coffeebreak]

Would you please provide some links to sites where you encounter this?

[postbuz]

Hi coffeebreak,

Here are some that have this:

http://thehill.com/homenews/administrat ... -free-pass
https://www.google.nl/search?q=mirjam+k ... wQKFgKvoDA
viewforum.php?f=1

Now as I type this, after having copied the above links in, I get it

PB

[postbuz]

And if I remain on this page, it eventually comes back & back....

[postbuz]

Sorry, for going on, but hope this helps. It's happening almost everywhere. I copied over 2 older versions from before this problem started (do a full backup of the PC every day), but get the same thing then.
Curiouser and curiouser... That does not make any sense

[Night Wing]

I clicked on both of those links the OP's listed and I don't get any type of pop up.

[postbuz]

Hi Night Wing,

I did not get it either with these links until today. But now, even when I do a full restore (not just copying the relevant Pale Moon directories), I get it. It just should not be possible...
But still it is. Problem is, that I have no clue what this pop-up is trying to tell me. Unless it is, welcome to a parallel universe

[coffeebreak]

@postbuz,
I don't get any message/popup from those sites either.

And when you say "Now as I type this, after having copied the above links in, I get it" - Do you mean you get this warning here on this forum as well?

I'm not knowledgeable about content security policy. But gather from a quick search that your type of error is normally caused by a misconfigured server that sends improper headers. That doesn't seem (to me) to fit well with this suddenly happening all over the place. Something in your own security configuration as well?

(BTW, just for context, you might check out these threads on similar problem:
https://forum.palemoon.org/viewtopic.php?f=29&t=8685
https://forum.palemoon.org/viewtopic.php?f=3&t=12356)

[Moonchild]

You may want to check for other software you've recently installed or updated, especially things like firewall, internet security, antivirus, etc.
This forum (and many other sites) do not allow the page content to be loaded in a frame (to prevent spoofing/phishing). If it is still being loaded in a frame, you will get that error message.

[postbuz]

Hi Moonchild,

I run an extremely protection-light Win7 X64 Sp1. Only anti-virus installed is MSIE, set to run only on demand. Free Malwarebytes also only on demand. Firewall is the very basic & unobtrusive Privatefirewall. So nothing overly-actively messing with my system, I believe. Only recent changes are new sig files for MSIE. For security, I rely entirely on my full daily backups in case of anything on-towards happening.

So what could it be?

PB

[Pallid Planetoid]

Have you tried rebooting (which among other things will clear your cache)?

[Moonchild]

As said the only cause for this is that your web content is being loaded in a frame inside another web page. That can be injected by local software or in the browser itself, or in much rarer occasions by your network gateway (but that likely wouldn't occur with https).
It should never happen unless you have specific software or an extension that causes this. The error is (as said) an anti-spoofing security measure.

Are you using a browsing gateway or proxy?
Is the address bar showing anything except what is expected when you visit sites and the error is thrown?

[postbuz]

Thanks all,

I solved the problem, but without really knowing how I rolled back through a couple of backups & the one of 3 days ago works fine. Al I remember doing in the meantime is changing a few settings in Process Lasso. Well, it works, so I shouldn't not complain. But I still wonder...

PB