Firefox 153 prevents Talk loading in NC34

[JoeMrCoffee]

Tip

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

---

Steps to reproduce

1. Install a fresh Nextcloud 34
2. Install Talk from the App store or on Recommended Apps prompt
3. Try to load the Talk page

Expected behaviour

Tell us what should happen

It should appear

Actual behaviour

Tell us what happens instead

It doesn't appear.

I found this first after upgrading a test environment from NC 33 to NC 34 using Docker. After a few weeks of experiencing the issue, I decided to test a fresh install in a KVM VM running Ubuntu 26.04, PHP8.5, and the nextcloud-latest.zip file all installed directly in the VM - no Docker. Same issue in Firefox. Chrome works fine. Also tested Floorp (downstream Firefox) and the same issue.

Screenshots:

Talk app

Talk app version: (see apps administration page: /index.php/settings/apps)
24.0.3

Custom Signaling server configured: yes/no and version (see Talk administration settings: /index.php/settings/admin/talk#signaling_server)
Not used - this is just the Talk App - no HPB applied

Custom TURN server configured: yes/no (see Talk administration settings: /index.php/settings/admin/talk#turn_server)

Custom STUN server configured: yes/no (see Talk administration settings: /index.php/settings/admin/talk#stun_server)

Browser

Firefox 153 and Floorp Version 12.16.4@153.0

Microphone available: yes/no
Irrevelent

Camera available: yes/no
Irrevalent

Operating system: Windows/Ubuntu/Mac/...
Fedora 44 - though this issue appeared on Fedora 43 as well

Browser name: Firefox/Chrome/Safari/...
Above
Browser version: 124/125/...
Above

Browser log

Details

``` Insert your browser log here, this could for example include: a) The javascript console log b) The network log c) ... ```

Server configuration

Operating system: Ubuntu/RedHat/...
Server host is Ubuntu 26.04

Web server: Apache/Nginx
Apache

Database: MySQL/Maria/SQLite/PostgreSQL
MariaDB

PHP version: 8.1/8.2/8.3
8.5

Nextcloud Version: (see administration page)
34

List of activated apps:

Details

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your server installation folder

Nextcloud configuration:
Enabled:

• activity: 7.0.0
• app_api: 34.0.0
• appstore: 1.0.0
• bruteforcesettings: 7.0.0
• calendar: 6.5.2
• circles: 34.0.0
• cloud_federation_api: 1.18.0
• comments: 1.24.0
• contacts: 8.7.5
• contactsinteraction: 1.15.0
• dashboard: 7.14.0
• dav: 1.39.0
• federatedfilesharing: 1.24.0
• federation: 1.24.0
• files: 2.6.0
• files_downloadlimit: 5.2.0
• files_lock: 34.0.1
• files_pdfviewer: 7.0.0-dev.0
• files_reminders: 1.7.0
• files_sharing: 1.26.0
• files_trashbin: 1.24.0
• files_versions: 1.27.0
• firstrunwizard: 7.0.0-dev.0
• logreader: 7.0.0
• lookup_server_connector: 1.22.0
• nextcloud_announcements: 6.0.0
• notifications: 7.0.0-dev.1
• oauth2: 1.22.0
• office: 1.0.0
• password_policy: 6.0.0-dev.0
• photos: 7.0.0
• privacy: 6.0.0-dev.1
• profile: 1.3.0
• provisioning_api: 1.24.0
• recommendations: 7.0.0
• related_resources: 5.0.0-dev.0
• richdocuments: 11.1.0
• serverinfo: 6.0.0
• settings: 1.17.0
• sharebymail: 1.24.0
• spreed: 24.0.3
• support: 6.0.0
• survey_client: 6.0.0-dev.0
• systemtags: 1.24.0
• text: 8.0.0
• theming: 2.9.0
• twofactor_backupcodes: 1.23.0
• twofactor_totp: 16.0.0
• updatenotification: 1.24.0
• user_status: 1.14.0
• viewer: 7.0.0-dev.0
• weather_status: 1.14.0
• webhook_listeners: 1.6.0
• workflowengine: 2.16.0

Details

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

Server log (data/nextcloud.log)

Details

Insert your server log here

[Antreesy]

Can you check what headers set for the root document? As an example from local machine:

`GET https://nextcloud.local/index.php/apps/spreed/`

Content Security Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-BOgCft1KBjsaBYGUA/4EkXTRiioCrrERRAq7R/DcPKE=' * blob: 'wasm-unsafe-eval';script-src-elem 'strict-dynamic' 'nonce-BOgCft1KBjsaBYGUA/4EkXTRiioCrrERRAq7R/DcPKE=' * blob: 'wasm-unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self' * blob: stun.nextcloud.com:443 wss://talk-signaling.local;media-src 'self' blob:;frame-src blob: 'self';frame-ancestors 'self';worker-src 'self' blob:;form-action 'self'

[JoeMrCoffee]

Checking with a self-signed cert - seems it is an SSL permission - although the issue doesn't occur in NC33 and previous versions, I think there is a new js dependency that might have been introduced. But I can get it to work with the self-signed cert and https