Details
-
Bug
-
Resolution: Done
-
Blocker
-
None
-
jboss-fuse-6.3
-
None
Description
Hawtio secured by Keycloak loads javascript adapter from https://KEYCLOAK-URL:PORT/auth/js/keycloak.js. It looks like loading of js adapter is blocked by Content Security Policy in version 6.3.0.redhat-396. Version 6.3.0.redhat-377 works correctly.
Log message from browser console contains following messages:
Refused to load the script 'https://localhost:8543/auth/js/keycloak.js' because it violates the following Content Security Policy directive: "script-src 'self' localhost:8543 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. [Keycloak] Not able to load keycloak.js from: https://localhost:8543/auth/js/keycloak.js
