# Bug OP-14704 - Blank page when clicking a link in meeting agenda item notes

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-14704

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 14.0.0 |
| Observed in versions | 13.4.0 |
| Sprint | 14.0.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) | 13.4.x |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

1.  Go to <https://community.openproject.org/meetings/3015>
2.  Click on "#53565" in the milestone link in the 1st agenda item "MILESTONE <mention class="mention" data-id="53565" data-type="work_package" data-text="#53565">#53565</mention>: Feature complete 14.0"
3.  Or click the link <https://community.openproject.org/projects/development/wiki/query-based-bugfixing> on the 3rd agenda item

Or

1.  Create an agenda item
2.  In its notes, link to a work package with the "\#\#" macro
3.  Once done, click the link from the work pacakge macro

### What is the buggy behavior?

  - A blank page is displayed
  - Nothing happens
  - There is a CSP error in the JS console

### What is the expected behavior?

1.  Navigating to the clicked link

### **Logs**

**Arc** browser console logs:

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-MEX+5RWT/hJEBDfcQkvY607sgJxMYluDq9dcJICGC4k=' 'unsafe-inline'". Note that 'unsafe-inline' is ignored if either a hash or nonce value is present in the source list.  turbo.es2017-esm.js:2653

**Firefox** browser console logs:

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).  turbo.es2017-esm.js:2653:26

seems to be some script inside turbo trying to capture the Link.

### Environment information

**OpenProject installation type**

- [x] Hosted cloud edition
- [ ] Packaged installation
    - What distribution?
- [ ] Docker All-in-one container
- [ ] Docker-compose installation
- [ ] Other (please specify)

**OpenProject version**

community [13.4.1.2b0cfae61bd87f0...](https://github.com/opf/openproject/compare/13.4.1.eda9bc89a68a4411ea44ca010423767dcc7d2a39...13.4.1.2b0cfae61bd87f05abe6f25954d3a8d2ba8a76ca)

**Browser**

- [ ] Chrome
- [x] Firefox
- [ ] Safari
- [ ] Mobile Safari
- [x] Other (please specify)
  - [x]  Arc (Chrome-based browser)