Failed to construct 'Worker': Access to the script at 'blob:xxxxyyyyyzzzzzz.xxxxx is denied by the document's Content Security Policy

Questions
1

Hi,
I am getting an error while importing meshes while host the project in a particular server. I am not getting this in all servers. Because of, some unavoidable reasons, I can’t share the server details. I give the error message below. Please have a look into this, and if you faced it already, help me on this.

Unable to import meshes from assets/xxxx/yyyy.glb /meshes/0/primitives/0: Failed to construct ‘Worker’: Access to the script at 'blob:https://www.xxxxx.yyy is denied by the document’s Content Security Policy

2

This is related to your server’s security policy. Probably embedded at the server level, but as you can’t share it is impossible to know for sure.

This page should help - CSP: worker-src - HTTP | MDN , you will need to allow worker blobs locally.

Don’t take that as a solution but as an advice, as this is your site’s security settings (!!) and they are there for a reason, but setting something like this:

worker-src 'self' blob: ;

as your workers security policy will probably fix that.

3

Hey there @jayakannan checking in, did you get your project working? Anything more we can help? :smiley:

1 Like
4

It is working Now @carolhmj :smiley: :blush:

1 Like
5

Great , its working. Added Worker src in csp header