Getting "Bad Request" on fresh install

Hey there! I just installed ghost on my linux (ubuntu) vps, but I’m getting Bad Request error.

  • What’s your URL? This is the easiest way for others to debug your issue

https://nwilhelm.io/ghost/

  • What version of Ghost are you using?
    I'm using latest as of today

  • What browser?
    Brave and microsoft edge

  • What errors or information do you see in the console?
    Refused to execute inline script because it violates the following Content Security Policy directive: “default-src ‘none’”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-+EO/Dv6JLDXHsiWJqgcq3rxmi1d+YSbJl6gNZUXzlbQ=’), or a nonce (‘nonce-…’) is required to enable inline execution. Note also that ‘script-src’ was not explicitly set, so ‘default-src’ is used as a fallback.

ghost/:1 Refused to load the script ‘https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317’ because it violates the following Content Security Policy directive: “default-src ‘none’”. Note that ‘script-src-elem’ was not explicitly set, so ‘default-src’ is used as a fallback.

So that’s not a Ghost thing. Looks like you’ve got some domain protection or proxying turned on with Cloudflare. Can you flip your site over to development mode & turn all the Cloudflare additions off, and see if the issue is resolved? Then you’ll be sure you have a working Ghost site and can start turning on various protection until you break something. :)

1 Like