pkg.go.dev jump to broken?

150 views
Skip to first unread message

Steven Hartland

unread,
Nov 16, 2021, 3:37:08 PM11/16/21
to golang-nuts
Clicking the jump to or pressing F on pkg.go.dev seems to be broken here.

In Chrome console I'm seeing security warning about eval, which could be the cause:
Content Security Policy of your site blocks the use of 'eval' in JavaScript`
The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.
To solve this issue, avoid using eval(), new Function(), setTimeout([string], ...) and setInterval([string], ...) for evaluating strings.
If you absolutely must: you can enable string evaluation by adding unsafe-eval as an allowed source in a script-src directive.
⚠️ Allowing string evaluation comes at the risk of inline script injection.
1 directive
Source Location Directive Status
gtm.js?id=GTM-W8MVQXG:3 script-src blocked
Learn more: Content Security Policy - Eval

Brian Candler

unread,
Nov 16, 2021, 3:44:09 PM11/16/21
to golang-nuts
Works for me: Chrome 96.0.4664.45, macOS 10.14.6

Steven Hartland

unread,
Nov 17, 2021, 8:40:33 AM11/17/21
to Brian Candler, golang-nuts
Didn't touch anything on my side and it's working again today, error has gone from the console as well, so can only assume someone fixed something.

Thanks for feedback Brian :)

   Regards
   Steve

On Tue, 16 Nov 2021 at 20:44, Brian Candler <b.ca...@pobox.com> wrote:
Works for me: Chrome 96.0.4664.45, macOS 10.14.6

--
You received this message because you are subscribed to the Google Groups "golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/6b1f490d-3625-4ca6-9a0e-0d0459f2c631n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages