Hello,
When I want to access my project in the web GUI of Sonar, I get a brown frame with this message:
“The component cannot be loaded. Try again later.”
Hard reload worked for me.
What do you mean by “hard reload” ?
Did you have to do this hard reload these last hours ?
yes, ctrl+F5
That doesn’t work for me.
Also, the request to the API don’t work anymore. The API server is OK, but the answer’s content is bad.
Thanks anyway.
In the log of my browser, I got 9 “Content-Security-Policy” errors, and also this error:
TypeError: error loading dynamically imported module: https://sonarcloud.io/linear-EdLA-GKt.js
Hi @Oodini,
Are you still experiencing this? There was a since-fixed CloudFlare outage today. It shouldn’t have impacted SonarQube Cloud, but I’d like to check.
Thx,
Ann
Hello,
The service back when CloudFlare was finally up again.
But the problem cames back today/now, and here is the CloudFlare status:
Hi,
During the CloudFlare outage, I checked internally, and learned that it shouldn’t have impacted the SonarQube Cloud UI. However, we do wonder if your own organization is using something that might be blocking the calls. Can you check with your network folks?
Thx,
Ann
Hello,
The problem is still there. The IT people here don’t see either any reason.
The logs in Firefox has several Javascript errors talking about security (SHA), and many domains are referenced (Google, Twitter, DoubleClick…).
Hi,
Can you share the errors you’re seeing in the console?
Thx,
Ann
I discovered the problem occurs with Firefox, bot not with Chrome.
Logs in french, sorry. But Sonar is swiss, so…
Content-Security-Policy : Les paramètres de la page ont empêché l’exécution d’un script intégré (script-src-elem) car il enfreint la directive suivante : « script-src 'self' 'unsafe-eval' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://*.clarity.ms https://pagead2.googlesyndication.com https://google.com https://bat.bing.com https://*.g.doubleclick.net https://*.google.com https://snap.licdn.com https://static.ads-twitter.com https://cdn.cookielaw.org https://sentry.io https://*.sentry.io https://*.fullstory.com https://*.sprig.com https://*.stripe.com/ https://*.getbeamer.com https://gateway.zscaler.net 'unsafe-inline' ». Envisagez d’utiliser une empreinte (« sha256-UiEOL2l0X0F53lZ+VsVoE+JRxD6dkHKkTLgB3STIbKg= ») ou un nonce. preload.js:139:16
Content-Security-Policy : (Politique Report-Only) Les paramètres de la page pourraient empêcher l’exécution d’un script intégré (script-src-elem) car il enfreint la directive suivante : « script-src 'self' 'unsafe-eval' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://*.clarity.ms https://pagead2.googlesyndication.com https://google.com https://bat.bing.com https://*.g.doubleclick.net https://*.google.com https://snap.licdn.com https://static.ads-twitter.com https://cdn.cookielaw.org https://sentry.io https://*.sentry.io https://*.fullstory.com https://*.sprig.com https://*.stripe.com/ https://*.getbeamer.com ». Envisagez d’utiliser une empreinte (« sha256-UiEOL2l0X0F53lZ+VsVoE+JRxD6dkHKkTLgB3STIbKg= ») ou un nonce. preload.js:139:16
Content-Security-Policy : Les paramètres de la page ont empêché l’exécution d’un script intégré (script-src-elem) car il enfreint la directive suivante : « script-src 'self' ». Envisagez d’utiliser une empreinte (« sha256-8XCGQK80+k16Nz5T9GkTkQTzuVxdxpqj96tcmaRO4fU= ») ou un nonce. preload.js:139:16
Content-Security-Policy : (Politique Report-Only) Les paramètres de la page pourraient empêcher l’exécution d’un script intégré (script-src-elem) car il enfreint la directive suivante : « script-src 'self' ». Envisagez d’utiliser une empreinte (« sha256-8XCGQK80+k16Nz5T9GkTkQTzuVxdxpqj96tcmaRO4fU= ») ou un nonce. preload.js:139:16
Content-Security-Policy : Les paramètres de la page ont empêché l’exécution d’un script intégré (script-src-elem) car il enfreint la directive suivante : « script-src https://m.stripe.network 'sha256-e357n1PxCJ8d03/QCSKaHFmHF1JADyvSHdSfshxM494=' 'sha256-5DA+a07wxWmEka9IdoWjSPVHb17Cp5284/lJzfbl8KA=' 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls=' ». Envisagez d’utiliser une empreinte (« sha256-eZoqKwThOcgOA8S4O0tnENKsOWG2kCnnsUXcnlmXATE= ») ou un nonce. preload.js:139:16
TypeError: can't access property "insertRule", styleElement.sheet is null
element-collapser.js:91:9
Content-Security-Policy : Les paramètres de la page ont empêché l’application d’un style intégré (style-src-elem) car il enfreint la directive suivante : « style-src 'self' ». Pensez à utiliser une empreinte (« sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= », nécessite « unsafe-hashes » pour les attributs de style) ou un nonce. element-collapser.js:88:57
Content-Security-Policy : (Politique Report-Only) Les paramètres de la page pourraient empêcher l’application d’un style intégré (style-src-elem) car il enfreint la directive suivante : « style-src 'self' ». Envisagez d’utiliser une empreinte (« sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= », nécessite « unsafe-hashes » pour les attributs de style) ou un nonce. element-collapser.js:88:57
TypeError: error loading dynamically imported module: https://sonarcloud.io/linear-EdLA-GKt.js
oj https://sonarcloud.io/WebApp-Dhsr8oQ_.js:3
gT https://sonarcloud.io/utils-BM5EpR7u.js:2
echoes-C8BoLjQE.js:2:300161
1 Like
Hi,
This is very helpful. I’ve flagged this for the relevant folks (who fortunately all speak French 
)
Thx,
Ann
Hello @Oodini,
Are you still seeing the issue?
Regarding the logs you shared, the CSP errors are expected, looking at their names, the scripts that are blocked are not ours, maybe they are extensions that are installed in your browser?
The error I’m interesting in is the one about https://sonarcloud.io/linear-EdLA-GKt.js that couldn’t be loaded.
Is this happening when you go to a specific page? Or is all the whole app that doesn’t load?
Is it always the same file or a different name everytime? Also, if you put that url that coulnd’t be loaded in you browser, does it load js file or not? Or do you see a different error?
Hello @Gregoire_Aubert ,
No, it disappeared.
I do have AdBlocker, so yes, that may explain some errors.
It happened on the main frame, whatever the project. The frames on the top and on the left edge were OK.
That doesn’t work again ! 
It is always https://sonarcloud.io/linear-EdLA-GKt.js.
And if I try to load this URL in a Firefox tab, I get the mesage
Erreur d’encodage de contenu
La page que vous essayez de voir ne peut être affichée car elle utilise un type de compression invalide ou non pris en charge.