Webmin Version 1.680 breaks Dansguardian Version 2.10.1.1 about webmin

[jcameron]

Can you tell me more about how it breaks exactly? What error message do you get?

[prgwiz]

On 3/20/2014 7:51 PM, Jamie Cameron wrote:

Can you tell me more about how it breaks exactly? What error message
do you get?

Under

It should look like:

But after the update it looks like:

Looking at the source of the html, the table is there but the css is
pushing it out of view. Clicking on Filter Group f1 does not show it
either.

[jcameron]

I didn't see any screenshot in your post above, sorry?

[prgwiz]

Try:
http://www.ask-services.com/tmp/good.png
http://www.ask-services.com/tmp/bad.png

[jcameron]

Thanks, it looks like an API change may have broken this.

Where did you download the Dansguardian Webmin module from?

[prgwiz]

On 3/21/2014 1:00 AM, Jamie Cameron wrote:

Thanks, it looks like an API change may have broken this.

Where did you download the Dansguardian Webmin module from?

http://sourceforge.net/projects/dgwebminmodule/

[jcameron]

I can't see anything immediately wrong with the module code that would cause this.

You should file a sourceforge bug report with the dgwebminmodule project, at https://sourceforge.net/p/dgwebminmodule/bugs/

[prgwiz]

On 3/22/2014 1:57 AM, Jamie Cameron wrote:

I can't see anything immediately wrong with the module code that would
cause this.

You should file a sourceforge bug report with the dgwebminmodule
project, at https://sourceforge.net/p/dgwebminmodule/bugs/

—
Reply to this email directly or view it on GitHub
#136 (comment).

Thanks for looking. This module has worked for years. I looked into it
a bit more and it seems to be a Google Chrome only issue with the
current version of webmin. Chrome does not seem to like:

1. Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline'". editgroupslists.cgi:10 1. onload

Yet in webmin Version 1.660 there is no such warning.

[jcameron]

Ok, that explains it - that is a new security feature in Webmin to block unsafe use of JS that may result from XSS attacks. To turn it off, add the line no_content_security_policy=1 to /etc/webmin/config

[chuued]

Just an fyi: in Firefox 28.0 I had the same behaviour and fixed it the same way.