This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

I get an error: "Blocked by Content Security Policy" when I open any e-mail. It say further "Firefox prevented this page from loading"

more options

It started yesterday. When I open my XFINITY email service and try to read any e-mail, the whole body of the e-mail is "Blocked by Content Security Policy." And it says further that "Firefox prevent this page from loading." It looks like it is a problem from the Firefox browser. Your help would be appreciated.

It started yesterday. When I open my XFINITY email service and try to read any e-mail, the whole body of the e-mail is "Blocked by Content Security Policy." And it says further that "Firefox prevent this page from loading." It looks like it is a problem from the Firefox browser. Your help would be appreciated.
Attached screenshots

Chosen solution

Hi frankdobner, Content Security Policy (or CSP) is a set of rules web servers can send Firefox about (A) what can load into a page, and (B) where a page can be loaded.

Let's suppose this only affected a handful of messages. I would say that either Zillow doesn't want other sites to embed its content, or Comcast doesn't allow Zillow content to load in a message. Either way, you hopefully can find a link to view the missing content on the source site.

But since it affects all messages, perhaps Comcast goofed in its webmail coding and is blocking more than it intended. Could you check with their support?

In case it was already fixed, or in case Firefox is mixing old files with new or old cookies with new:

Cache and Cookies: When you have a problem with one particular site, a good "first thing to try" is clearing your Firefox cache and deleting your saved cookies for the site.

(1) Clear Firefox's Cache

See: How to clear the Firefox cache

If you have a large hard drive, this might take a few minutes.

(2) Remove the site's cookies (save any pending work first). While viewing a page on the site, click the lock icon at the left end of the address bar. After a moment, a "Clear Cookies and Site Data" button should appear at the bottom. Go ahead and click that.

In the dialog that opens, you will see one or more matches to the current address so you can remove the site's cookies individually without affecting other sites.

Any improvement?

Read this answer in context 👍 1

All Replies (5)

more options

Chosen Solution

Hi frankdobner, Content Security Policy (or CSP) is a set of rules web servers can send Firefox about (A) what can load into a page, and (B) where a page can be loaded.

Let's suppose this only affected a handful of messages. I would say that either Zillow doesn't want other sites to embed its content, or Comcast doesn't allow Zillow content to load in a message. Either way, you hopefully can find a link to view the missing content on the source site.

But since it affects all messages, perhaps Comcast goofed in its webmail coding and is blocking more than it intended. Could you check with their support?

In case it was already fixed, or in case Firefox is mixing old files with new or old cookies with new:

Cache and Cookies: When you have a problem with one particular site, a good "first thing to try" is clearing your Firefox cache and deleting your saved cookies for the site.

(1) Clear Firefox's Cache

See: How to clear the Firefox cache

If you have a large hard drive, this might take a few minutes.

(2) Remove the site's cookies (save any pending work first). While viewing a page on the site, click the lock icon at the left end of the address bar. After a moment, a "Clear Cookies and Site Data" button should appear at the bottom. Go ahead and click that.

In the dialog that opens, you will see one or more matches to the current address so you can remove the site's cookies individually without affecting other sites.

Any improvement?

more options

Dear jscher2000,

I followed you suggested remedy. Clearing Firefox' cache seemed to do the trick. I can again read my comcast e-mail.

Thank you for your thorough, kind and prompt response to my question. It helped a great deal.

frankdobner

Modified by frankdobner

more options

Blocked by Content Security Policy

An error occurred during a connection to acs7.enstage-sas.com.

Firefox prevented this page from loading in this way because the page has a content security policy that disallows it.

more options

Blocked by Content Security Policy

An error occurred during a connection to acs7.enstage-sas.com.

Firefox prevented this page from loading in this way because the page has a content security policy that disallows it.

more options

Hi ASHFAQ, one possible reason for that is if the embedded site has a rule that it cannot be framed. Not sure how that was missed in testing!