Can't create new notes from the browser

[ppmt]

Hello
I have installed the latest app (2.0.0)

When I click on "New note" nothing happens. I can't write anything in the panel on the right. When I open the firefox console I can see the following message ( I hid my domain)

POST XHR https://mydomain/index.php/apps/notes/notes [HTTP/2.0 403 Forbidden 245ms]

I assume it must be something misconfigured somewhere but can't find what it is.

Also what is strange is that if I create a note from my tablet using the MyOwnNotes app then it gets uploaded to my ownCloud and then I can update these notes from the browser.

[ppmt]

Something I found while I am trying to debug it

13:15:10.520 Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://mydomain 'unsafe-eval'").1 notes

[Henni]

That might actually be related. I'm currently working on the contacts app and don't have time to look into this.
If you find a fix a PR would be really welcome! Otherwise I will hopefully look into this soon..

[ppmt]

I am not sure I will find a fix but will keep looking. My understanding of protocol is not that good I am afraid.
thanks for the help.

euh... what does PR stands for? :(

[Henni]

@ppmt Pull Request ;)

[ppmt]

Continuing my troubleshooting.

On the debugging output of the 403 there is another info that I missed previously missed. In the page source code I can see this (it doesn't appear in the browser though!)

This application requires JavaScript for correct operation. Please enable JavaScript and reload the page.

ownCloud

Access forbidden

ownCloud – web services under your control

But Javascript is enabled (I have checked)

Regarding the CSP error. Looking through the code of the app I found in the file js/vendor/angular/angular.js some reference to CSP (Starting line 23293). It mentions among other that the error I reported can occur that it is apparently more an annoyance that anything (see line 23311)

[ppmt]

Sorry me again. I hope this is not considered spamming.

I have managed to get it to work. My owncloud instance is on a shared host and via the Cpanel I deactivated the mod_security for my domain.

I can now create a new note from the browser. Obviously it is not a final solution

[Henni]

This is definitely not spamming. Every information is helpful.
Maybe @LukasReschke can take a look.

[ppmt]

I think somehow the mod_security option is causing the main issue.
I realise that something it's causing some issue with Tasks as well. With mod_security on the new task are not registering. Without it works fine.

Need to read more on what mod_security is about...

[jeremy447]

I have the same problem. Here is the error I get :

angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:10722

POST https://xxx.com/index.php/apps/notes/notes 403 (Forbidden)
(anonymous function) @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:10722
sendReq @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:10515
serverRequest @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:10222
processQueue @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:14745
(anonymous function) @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:14761
Scope.$eval @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:15989
Scope.$digest @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:15800
Scope.$apply @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:16097
(anonymous function) @ angular.js?v=537aea9d83c3e3f25038ab01127ddbbe:23554
x.event.dispatch @ jquery.min.js?v=537aea9d83c3e3f25038ab01127ddbbe:5
v.handle @ jquery.min.js?v=537aea9d83c3e3f25038ab01127ddbbe:5

[gnzsnz]

Same issue for me. I don't have mod_security enabled. using 8.1.6 (stable) from owncloud ubuntu 14.04 repository

[susca]

Same issue with OC 9.0.0 and 9.0.1beta. Hosted on a debian server running apache2. What do you mean by mod_security?

[jeremy447]

It's working now for me. I think it's because I have disabled mod_security.

[susca]

Hello, is mod_security an apache module?

[jeremy447]

@susca https://en.wikipedia.org/wiki/ModSecurity