RocketChat/Rocket.Chat

X-Content-Type-Options nosniif blocking javascript missing MIME type

crutchfield opened this issue · 5 comments

crutchfield commented

Description:

MIME type appears to be missing on javascript, meteor_runtime_config.js.

Steps to reproduce:

  1. Fresh install of 6.8.0 via docker
  2. Register
  3. Logout and attempt to log back in

Expected behavior:

Expected login screen or application to appear

Actual behavior:

Got "loading" dots
image

Server Setup Information:

  • Version of Rocket.Chat Server: 6.8.0
  • Operating System: Amazon Linux 2023
  • Deployment Method: Docker (Nginx reverse proxy)
  • Number of Running Instances: 1
  • DB Replicaset Oplog: yes
  • NodeJS Version: (From docker image)
  • MongoDB Version: 5.0

Client Setup Information

  • Desktop App or Browser Version: Firefox 115.10.0esr (64-bit), Chrome 124.0.6367.208 (Official Build) (64-bit)
  • Operating System: Amazon Linux 2023 and Microsoft Windows 2022 Datacenter

Additional context

Get same behavoir from both linux/firefox and windows/chrome.

Relevant logs:

Firefox console

The resource from “https://rocketchat2.pcms.internal/meteor_runtime_config.js?hash=b9db519591a16fd9eb3f010d6086859eb693e884” was blocked due to MIME type (“”) mismatch (X-Content-Type-Options: nosniff). rocketchat2.pcms.internal

Chrome console
image

crutchfield commented

Falling back to release 6.7.2 does not have same issue.

szmarczak commented

Looks like a duplicate of #30717 #30938

Also I'm encountering the same issue. Looks like RocketChat is a no-go for me :(

crutchfield commented

Agree it does appear to be a duplicate.