Friday, September 7, 2018

SharePoint Script Editor and Chrome ERR_BLOCKED_BY_XSS_AUDITOR

In recent Chrome browser, it has become little annoying to work with SharePoint tool due to Chrome throwing ERR_BLOCKED_BY_XSS_AUDITOR error when working with the Script Editor web part. This is due to XSS auditor on Chrome blocking JavaScript included in the Script Editor Web Part. Issue occurs on SharePoint Online and on-premises SharePoint 2016 and 2013 and occurs regardless if site is accessed via HTTP or HTTPS.


Problem:

This page isn’t working
    Chrome detected unusual code on this page and blocked it to protect your personal information (for example, passwords, phone numbers, and credit cards).
        Try visiting the site's homepage.
    ERR_BLOCKED_BY_XSS_AUDITOR

Solution:

You can disable the XSS Auditor by appending the following value to web.config on your on-premises SharePoint 2013 or 2016 web site.

  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <add name="X-XSS-Protection" value="0" />
      </customHeaders>


Ref:https://blog.jussipalo.com/2017/03/sharepoint-workaround-for-script-editor.html

No comments:

Post a Comment