ARTIFACTORY: “Blocked script execution”

Joey Naor
2021-05-11 10:11

Activating the “Allow Content Browsing” feature in an Artifactory repository allows browsing HTML files as if they were hosted on a web server.

Some users may find out that scripts such as Javascript are not being executed on these HTML pages, resulting in the following message in the browser console:Blocked script execution in 'http://artifactory:8082/artifactory/example-repo-local/test.html' because the document's frame is sandboxed and the 'allow-scripts' permission is not set.
This behavior is expected, as newer Artifactory versions include a security improvement that runs these HTML pages in a sandboxed environment in order to prevent potential attacks such as XSS or CSRF.

Published: May 11, 2021
Last updated: May 11, 2021

Keywords: content browsing, javascript, html