You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "LipuFei (via GitHub)" <gi...@apache.org> on 2026/05/08 09:42:01 UTC

[I] GUI loader.js doesn't load with CSP in place [airflow]

LipuFei opened a new issue, #66589:
URL: https://github.com/apache/airflow/issues/66589

   ### Under which category would you file this issue?
   
   Airflow Core
   
   ### Apache Airflow version
   
   3.2.1
   
   ### What happened and how to reproduce it?
   
   On the DAG execution details page, the "Details" block is stuck in "Loading". The content is actually available. I can click on the "copy" button to get the details.
   
   Based on my browser's console output, I think it's CSP issue with the Javascript `loader.js`. I have a CSP policy `"script-src" 'self' 'unself-inline'", which blocks cross-site script loading. This pages tries to load `loader.js` from https://cdn.jsdelivr.net. I think this is why the UI is stuck in "Loading".
   
   I'm not a Javascript expert, but I guess the fix is to bundle the relevant JS files so it doesn't need to go cross-site?
   
   Here is a screenshot:
   
   <img width="1988" height="759" alt="Image" src="https://github.com/user-attachments/assets/69a99f71-ca13-4774-b0d1-4eab1eb7c0ff" />
   
   ### What you think should happen instead?
   
   The UI elements should load correctly with CSP in place.
   
   ### Operating System
   
   _No response_
   
   ### Deployment
   
   Official Apache Airflow Helm Chart
   
   ### Apache Airflow Provider(s)
   
   _No response_
   
   ### Versions of Apache Airflow Providers
   
   _No response_
   
   ### Official Helm Chart version
   
   1.20.0
   
   ### Kubernetes Version
   
   1.33.10
   
   ### Helm Chart configuration
   
   _No response_
   
   ### Docker Image customizations
   
   _No response_
   
   ### Anything else?
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [x] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] GUI loader.js doesn't load with CSP in place [airflow]

Posted by "parkhojeong (via GitHub)" <gi...@apache.org>.
parkhojeong commented on issue #66589:
URL: https://github.com/apache/airflow/issues/66589#issuecomment-4430885225

   Hi @LipuFei 
   Thanks for the report. 
   I'll take a look. It may be related on #66020


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] GUI loader.js doesn't load with CSP in place [airflow]

Posted by "LipuFei (via GitHub)" <gi...@apache.org>.
LipuFei closed issue #66589: GUI loader.js doesn't load with CSP in place
URL: https://github.com/apache/airflow/issues/66589


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] GUI loader.js doesn't load with CSP in place [airflow]

Posted by "parkhojeong (via GitHub)" <gi...@apache.org>.
parkhojeong commented on issue #66589:
URL: https://github.com/apache/airflow/issues/66589#issuecomment-4431015037

   @LipuFei 
   This looks similar to #66020 and should be resolved by #66647, as it bundles Monaco instead of loading it from the CDN.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] GUI loader.js doesn't load with CSP in place [airflow]

Posted by "LipuFei (via GitHub)" <gi...@apache.org>.
LipuFei commented on issue #66589:
URL: https://github.com/apache/airflow/issues/66589#issuecomment-4612914853

   I can confirm that this is fixed in Airflow 3.2.2


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org