none
Cryptic error Outlook.com in IE11. Perhaps related to response security headers RRS feed

  • Question

  • I'm having a hard time figuring out what is wrong here.

    Here are the headers I'm using:

    Cache-Control:max-age=0, no-cache, no-store, must-revalidate, private
    Connection:keep-alive
    Content-Encoding:gzip
    Content-Security-Policy:default-src 'self'; script-src 'self' 'unsafe-inline' https://appsforoffice.microsoft.com https://ajax.aspnetcdn.com https://telemetryservice.firstpartyapps.oaspapps.com https://browser.pipe.aria.microsoft.com https://api.mixpanel.com; style-src 'self' 'unsafe-inline'; frame-src 'self' https://*.trove.com https://telemetryservice.firstpartyapps.oaspapps.com; connect-src 'self' https://*.trove.com https://telemetryservice.firstpartyapps.oaspapps.com https://browser.pipe.aria.microsoft.com https://api.mixpanel.com; frame-ancestors *
    Content-Type:text/html
    Date:Fri, 09 Feb 2018 14:15:38 GMT
    ETag:W/"5a7da721-30e"
    Last-Modified:Fri, 09 Feb 2018 13:50:25 GMT
    Pragma:no-cache
    Server:nginx/1.12.2
    Transfer-Encoding:chunked
    X-Content-Type-Options:nosniff
    X-Frame-Options:ALLOW-FROM https://outlook.trove.com https://outlook.live.com
    X-XSS-Protection:1; mode=block

    The only errors showing in the console are SEC7111. They <g class="gr_ gr_403 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="403" id="403">dont</g> seem to be related to my <g class="gr_ gr_585 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="585" id="585">add in</g>. The <g class="gr_ gr_597 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="597" id="597">url</g> they reference is the IE fallback.

    The panel itself says "Add-in Error Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.

    Let me know!

    Friday, February 9, 2018 3:00 PM