Content-Security-Policy default-src 'self' causes all kinds of issues, effectively breaking LimeSurvey

[marylou]

Update:
Content-Security-Policy update default-src 'self' caused all issues.

Hello,

the update from v1.6.1 to v1.6.2 (?) seems to have caused a number of issues that have not been fixed in v1.6.3.

The LimeSurvey editor switch disappeared: https://help.limesurvey.org/portal/en/kb/articles/switch-editor-version
-> We can't access the old editor, we cannot access responses, we cannot export responses so that we can import an old backup.

There is an error message that my browser screen size is too small (it is not):

Notifications don't load:

In active surveys, background images etc. don't load.

It tried switching the URL format back to "get" in config.php, but it gets overwritten when the app reloads.
-> https://forum.cloudron.io/topic/15623/new-question-editor-require-config.php-change/6

None of these issues are reported in the LimeSurvey forum, so I suppose they be Cloudron-related?

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[james]

Hello @marylou

@marylou said:

The 159.10 backup still has the switch. It also has 'path' in its config.

You can edit that backup in the Cloudron dashboard to make it persistent so it does not get automatically cleaned up when new backups are created.

Are there any logs in the Cloudron web log viewer or browser console logs when the issues is present?

[marylou]

My restored backups and clones all have a looong number on the start page below the survey menus in the grey area. Is not there in the restored 159.10 version or in the newly installed 1.63.0

[marylou]

@james
But this version does not have the active surveys...

[james]

Hello @marylou

I was meaning to mark the backup that contains the working worsing so you don't lose it.

[marylou]

@james
Got it, thanks, but the working version does not contain the live surveys...
Also, a newly installed 1.63.0 has the switch and seems fine.
I will try to export/import the surveys into this version and then adjust the URL.

I'd be happy to activate remote support

I will try to export the survey structures from the broken / updated v1.63.0 and import them into the newly installed v1.63.0 and then update the URL.

[marylou]

Export is not working.

I can go to edit text elements and click export there. But I can't select anything, clicking Export does nothing.

[marylou]

Changing the theme to fruity to make it compatible with the new editor is not working (neither in a completely new survey nor in the active ones). It looks like all versions containing the live surveys (+ answers) are completely broken.

Is there any other way to export the .lsa?

[marylou]

Root SFTP access did not take me anywhere, but I was able to export the lsa through /index.php/admin/export/sa/survey/action/exportarchive/surveyid/123456 and import it into the freshly installed and working v1.63.0.
Everything is there, including all responses.

Let's hope adjusting the subdomain and using the same survey-aliases in the new installation will do the trick.

[marylou]

Done.
It's the first time ever that a backup of a version that worked before did not work.
Very strange, very scary. And quite nerve-racking.

[marylou]

Also set up an n8n auto export to Google Sheets.

[marylou]

It turns out that I set frame-ancestors (not causing any issues) and default-src 'self', which caused all issues, on 4 October.