[GH-ISSUE #600] Can't sign in #384

Closed
opened 2026-03-02 11:49:22 +03:00 by kerem · 2 comments
Owner

Originally created by @krcha on GitHub (Oct 30, 2024).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/600

Describe the Bug

I installed and launched on my server docker image of hoarder, all went fine, get to the sign in page and cant log in.

I managed to sign up (few accounts) checked them in db.db they are there but i cant sign in.

page behaviour is like i am refreshing it.

I'm using Brave, tried Chrome and Safari same behaviour.
Didnt get email when i tried to sign up with real email.

I saw this error in the inspect page

An element doesn't have an autocomplete attribute
Content Security Policy of your site blocks the use of 'eval' in JavaScript`
The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.

To solve this issue, avoid using eval(), new Function(), setTimeout([string], ...) and setInterval([string], ...) for evaluating strings.

If you absolutely must: you can enable string evaluation by adding unsafe-eval as an allowed source in a script-src directive.

⚠️ Allowing string evaluation comes at the risk of inline script injection.

1 directive
Source location Directive Status
script-src blocked
Learn more: Content Security Policy - Eval

Steps to Reproduce

go to hoarderd sing in page
enter email and pass that you used to sign up

Expected Behaviour

log in successfully

Screenshots or Additional Context

No response

Device Details

linode server

Exact Hoarder Version

0.18.0

Originally created by @krcha on GitHub (Oct 30, 2024). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/600 ### Describe the Bug I installed and launched on my server docker image of hoarder, all went fine, get to the sign in page and cant log in. I managed to sign up (few accounts) checked them in db.db they are there but i cant sign in. page behaviour is like i am refreshing it. I'm using Brave, tried Chrome and Safari same behaviour. Didnt get email when i tried to sign up with real email. I saw this error in the inspect page An element doesn't have an autocomplete attribute Content Security Policy of your site blocks the use of 'eval' in JavaScript` The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site. To solve this issue, avoid using eval(), new Function(), setTimeout([string], ...) and setInterval([string], ...) for evaluating strings. If you absolutely must: you can enable string evaluation by adding unsafe-eval as an allowed source in a script-src directive. ⚠️ Allowing string evaluation comes at the risk of inline script injection. 1 directive Source location Directive Status script-src blocked Learn more: Content Security Policy - Eval ### Steps to Reproduce go to hoarderd sing in page enter email and pass that you used to sign up ### Expected Behaviour log in successfully ### Screenshots or Additional Context _No response_ ### Device Details linode server ### Exact Hoarder Version 0.18.0
kerem closed this issue 2026-03-02 11:49:22 +03:00
Author
Owner

@krcha commented on GitHub (Oct 30, 2024):

i tried couple accounts to sing up they get created in the db.db but cant sing in, none of them i just keep stuck on the /sign in page

<!-- gh-comment-id:2448577639 --> @krcha commented on GitHub (Oct 30, 2024): i tried couple accounts to sing up they get created in the db.db but cant sing in, none of them i just keep stuck on the /sign in page
Author
Owner

@krcha commented on GitHub (Oct 30, 2024):

Solved it with deleting hoarder images, reinstalling completely and running it again

<!-- gh-comment-id:2448685177 --> @krcha commented on GitHub (Oct 30, 2024): Solved it with deleting hoarder images, reinstalling completely and running it again
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/karakeep#384
No description provided.