Content-Security-Policy default-src 'self' causes all kinds of issues, effectively breaking LimeSurvey

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[marylou]

This post is deleted!

[james]

Hello @marylou

@marylou said:

The 159.10 backup still has the switch. It also has 'path' in its config.

You can edit that backup in the Cloudron dashboard to make it persistent so it does not get automatically cleaned up when new backups are created.

Are there any logs in the Cloudron web log viewer or browser console logs when the issues is present?

[marylou]

My restored backups and clones all have a looong number on the start page below the survey menus in the grey area. Is not there in the restored 159.10 version or in the newly installed 1.63.0

[marylou]

@james
But this version does not have the active surveys...

[james]

Hello @marylou

I was meaning to mark the backup that contains the working worsing so you don't lose it.

[marylou]

@james
Got it, thanks, but the working version does not contain the live surveys...
Also, a newly installed 1.63.0 has the switch and seems fine.
I will try to export/import the surveys into this version and then adjust the URL.

I'd be happy to activate remote support

I will try to export the survey structures from the broken / updated v1.63.0 and import them into the newly installed v1.63.0 and then update the URL.

[marylou]

Export is not working.

I can go to edit text elements and click export there. But I can't select anything, clicking Export does nothing.

[marylou]

Changing the theme to fruity to make it compatible with the new editor is not working (neither in a completely new survey nor in the active ones). It looks like all versions containing the live surveys (+ answers) are completely broken.

Is there any other way to export the .lsa?

[marylou]

Root SFTP access did not take me anywhere, but I was able to export the lsa through /index.php/admin/export/sa/survey/action/exportarchive/surveyid/123456 and import it into the freshly installed and working v1.63.0.
Everything is there, including all responses.

Let's hope adjusting the subdomain and using the same survey-aliases in the new installation will do the trick.

[marylou]

Done.
It's the first time ever that a backup of a version that worked before did not work.
Very strange, very scary. And quite nerve-racking.

[marylou]

Also set up an n8n auto export to Google Sheets.

[marylou]

It turns out that I set frame-ancestors (not causing any issues) and default-src 'self', which caused all issues, on 4 October.