Can someone sanity check this for me please. In ou...
# _general
c
Can someone sanity check this for me please. In our enviroment events.teams.microsoft.com stopped working you get a blank white screen and nothing else. When i have investigated using the chrome developer options i see CSP (Content security policy violations) where javascript is unable to run from https://wcpstatic.microsoft.com see screenshots . When i check the CSP http headers for https://events.teams.microsoft.com the url https://wcpstatic.microsoft.com is listed under script-src as a trusted domain to run javascripts from. The issue we have seems to stem from Zscaler performing SSL inspection on https://wcpstatic.microsoft.com as when i go to that URL i see the Zscaler certificate being used which in turn changes the Origin URL to the Zscaler url + original url see screenhot and because this URL isnt allowed in the CSP the request is blocked by the browser. My security team are telling me its a local client browser issue !!! but i am pretty certain its a Zscaler issue and all they need to do is turn SSL inspection off for that URL where the javascript file is located. Using a CSP chrome add-in to strip out the CSP header the page loads fine
b
I had a similar issue with giphy. Removing the SSL interception fixed it. It can't be a local client issue as the events are not optimized. Only media, calling and screensharing.