Hello,
I recently onboarded to openreplay cloud and I tried to login on app.openreplay.com on my phone yesterday and got a white screen with nothing loaded. I thought nothing of it, but today I am trying to log in through my laptop and I get a fully white screen. The console logs many errors:
EvalError: call to eval() blocked by CSP
Content-Security-Policy: The page’s settings blocked a JavaScript eval (script-src) from being executed because it violates the following directive: “script-src 'self' https://static.openreplay.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.stripe.com https://checkout.stripe.com https://client.crisp.chat https://d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/MehpSkgi5fumG1v1/delighted.js 'sha256-3qFnv+LZ7QgsuRjeUEqKAqsxf/Mh8DciXlno27Kf7N4='” (Missing 'unsafe-eval')
Source: ;(function n(e,t=!1){const o="6.0";let r… app.openreplay.com
Request for font "Nimbus Roman" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "URW Bookman" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "C059" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "P052" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "Standard Symbols PS" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "Caladea" blocked at visibility level 2 (requires 3)
app.openreplay.com
Request for font "Symbola" blocked at visibility level 2 (requires 3)
app.openreplay.com
unreachable code after return statement
app-4765b83.js:171:3642
unreachable code after return statement
app-4765b83.js:171:11470
EvalError: call to eval() blocked by CSP
Content-Security-Policy: The page’s settings blocked a JavaScript eval (script-src) from being executed because it violates the following directive: “script-src 'self' https://static.openreplay.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.stripe.com https://checkout.stripe.com https://client.crisp.chat https://d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/MehpSkgi5fumG1v1/delighted.js 'sha256-3qFnv+LZ7QgsuRjeUEqKAqsxf/Mh8DciXlno27Kf7N4='” (Missing 'unsafe-eval')
Source: ;(function n(e){let t=1e3,n=10;function … app.openreplay.com
Request for font "Noto Sans Meetei Mayek" blocked at visibility level 2 (requires 3)
login
Request for font "Noto Sans Ol Chiki" blocked at visibility level 2 (requires 3)
login
Request for font "Nimbus Sans" blocked at visibility level 2 (requires 3)
login
Request for font "Open Sans" blocked at visibility level 2 (requires 3)
login
Request for font "Comfortaa" blocked at visibility level 2 (requires 3)
login
Request for font "Montserrat" blocked at visibility level 2 (requires 3)
login
Request for font "URW Gothic" blocked at visibility level 2 (requires 3)
login
Request for font "Nimbus Sans Narrow" blocked at visibility level 2 (requires 3)
login
Request for font "Carlito" blocked at visibility level 2 (requires 3)
login
Content-Security-Policy warnings 4
Partitioned cookie or storage access was provided to “https://www.google.com/recaptcha/api2/bframe?hl=en&v=rW64dpMGAGrjU7JJQr9xxPl8&k=6LesvKYUAAAAACSknXvNW1yC1lHOmyc8_hZgkY6T” because it is loaded in the third-party context and dynamic state partitioning is enabled.
Cookie warnings 2
Error: Minified React error #130; visit https://reactjs.org/docs/error-decoder.html?invariant=130&args[]=undefined&args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings.
ru https://app.openreplay.com/app-4765b83.js:294
Zs https://app.openreplay.com/app-4765b83.js:292
Be https://app.openreplay.com/app-4765b83.js:294
at https://app.openreplay.com/app-4765b83.js:294
ku https://app.openreplay.com/app-4765b83.js:294
Lu https://app.openreplay.com/app-4765b83.js:294
Qu https://app.openreplay.com/app-4765b83.js:294
nu https://app.openreplay.com/app-4765b83.js:294
vu https://app.openreplay.com/app-4765b83.js:294
zu https://app.openreplay.com/app-4765b83.js:294
qs https://app.openreplay.com/app-4765b83.js:292
rc https://app.openreplay.com/app-4765b83.js:294
app-4765b83.js:122:1367
Uncaught Error: Minified React error #130; visit https://reactjs.org/docs/error-decoder.html?invariant=130&args[]=undefined&args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings.
ru https://app.openreplay.com/app-4765b83.js:294
Zs https://app.openreplay.com/app-4765b83.js:292
Be https://app.openreplay.com/app-4765b83.js:294
at https://app.openreplay.com/app-4765b83.js:294
ku https://app.openreplay.com/app-4765b83.js:294
Lu https://app.openreplay.com/app-4765b83.js:294
Qu https://app.openreplay.com/app-4765b83.js:294
nu https://app.openreplay.com/app-4765b83.js:294
vu https://app.openreplay.com/app-4765b83.js:294
zu https://app.openreplay.com/app-4765b83.js:294
qs https://app.openreplay.com/app-4765b83.js:292
rc https://app.openreplay.com/app-4765b83.js:294
app-4765b83.js:294:51833
Content-Security-Policy warnings 4
Partitioned cookie or storage access was provided to “https://www.google.com/recaptcha/api2/bframe?hl=en&v=rW64dpMGAGrjU7JJQr9xxPl8&k=6LesvKYUAAAAACSknXvNW1yC1lHOmyc8_hZgkY6T” because it is loaded in the third-party context and dynamic state partitioning is enabled.
Cookie warnings 2
Source map error: Error: JSON.parse: unexpected character at line 1 column 1 of the JSON data
Stack in the worker:parseSourceMapInput@resource://devtools/client/shared/vendor/source-map/lib/util.js:163:15
_factory@resource://devtools/client/shared/vendor/source-map/lib/source-map-consumer.js:1066:22
SourceMapConsumer@resource://devtools/client/shared/vendor/source-map/lib/source-map-consumer.js:26:12
_fetch@resource://devtools/client/shared/source-map-loader/utils/fetchSourceMap.js:83:19
Resource URL: https://app.openreplay.com/main.css
Source Map URL: main.css.map
Source map error: Error: JSON.parse: unexpected character at line 1 column 1 of the JSON data
Stack in the worker:parseSourceMapInput@resource://devtools/client/shared/vendor/source-map/lib/util.js:163:15
_factory@resource://devtools/client/shared/vendor/source-map/lib/source-map-consumer.js:1066:22
SourceMapConsumer@resource://devtools/client/shared/vendor/source-map/lib/source-map-consumer.js:26:12
_fetch@resource://devtools/client/shared/source-map-loader/utils/fetchSourceMap.js:83:19
Resource URL: https://app.openreplay.com/app-4765b83.js
Source Map URL: app-4765b83.js.map
Uncaught (in promise) Timeout (B)
This looks like a faulty deployment to me. Can anyone confirm and even better, rollback whatever update caused this? The product is unusable now. Tested on Firefox 135.0.1 and chrome 133.0.6943.126. Same result.
