pageSaving.js Cross-Origin-Resource-Policy violations on Safari

gio.bertelli
On multiple occasions I'm stuck with cloudflare captchas which keep restarting the verification process asking me again and again to check that I'm not a robot. Opening the web inspector tool in Safari I see multiple errors, such as:

"Fail safari-extension://B52A96B3-A997-4D79-B4C52FD401FC278A/safari/inject/pageSaving.js ed to load resource: Cancelled load to safari-extension://B52A96B3-A997-4D79-B4C5-2FD401FC278A/safari/inject/pageSaving.js because it violates the resource's Cross-Origin-Resource-Policy response header.

• Unhandled Promise Rejection: TypeError: Cross-origin script load denied by
inject.js:75 Cross-Origin Resource Sharing policy.

• Blocked script execution in 'about:blank' because the single-file-extension-frames.js:1:193 document's frame is sandboxed and the 'allow-scripts' permission is not set."

Checking for those I find messages saying that those scripts are part of Zotero.

I'm using macOS 26.1 with Zotero latest version (7.0.29).
  • adomasven
    Are you having problems just browsing ScienceDirect or saving with the Zotero Connector? If it's the latter, unfortunately we cannot improve saving from ScienceDirect and other websites that use heavy bot protection from cloudflare due to technical limitations of Safari. We recommend using Chrome, Firefox or Edge on those websites.
  • gio.bertelli
    No, I'm only having problems with random captchas around the web, not while trying to save articles, but literally when trying to navigate web pages.
  • dstillman
    edited 3 days ago
    This may be fixed in the latest Zotero 8 beta.
  • kisufl
    I am on beta18 and I met this problem trying to login into this very forum just now. Row and rows of:

    > Blocked script execution in 'about:blank' because the single-file-extension-frames.js:1:193 document's frame is sandboxed and the 'allow-scripts' permission is not set."

    Ironically the problem went away temporarily for the Cloudflare captcha to succeed after I crashed the connector by trying to save a snapshot of a Substack page.
  • adomasven
    You should check for Zotero updates and make sure you are on 8.0-beta.19.
  • kisufl
    After updating to beta19 I can confirm that although the error messages are still there, I can pass the captcha on the login page of Zotero with the Connector enabled.
Sign In or Register to comment.