the Manage apps page is empty after upgrade

[Vincent Fiset]

After migrating from Jira 8.2.1 to Jira 8.3.5 on another server. The manage apps and find new apps pages are empty. My apps seem to be installed tho.

I created the new installation by copying the home folder and backing up the mysql database.

Before starting jira I've deleted the .bundled-plugins and .osgi-plugins folders.

I've also tried to upgrade the Atlassian Universal Plugin Manager to the latest version manually.

When trying to debug the problem I only find doc reffering to a settings page for the Atlassian Universal Plugin Manager that does not exist in this version.

While tailing all logs I find on the system, I don't see any error or clue.

There is no warning or error when I am on the page.

I've tried disabling the connection to the atlassian marketplace witth JVM_SUPPORT_RECOMMENDED_ARGS=-Dupm.pac.disable=true but it still did not load any result in manage apps

EDIT: in the javascript console I see errors like EvalError: call to Function() blocked by CSP I don't understand yet if they are related

What I am missing here ?

[Vincent Fiset · Accepted solution]

Finally the problem was at the reverse proxy level.

 in the nginx config I had a recommended security config for CSP

add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;

I added `'unsafe-eval'` and it works.

add_header Content-Security-Policy "default-src 'self' 'unsafe-eval' http: https: data: blob: 'unsafe-inline'" always;

At this point I am not sure of the extend of the compromise I just did...

[Vincent Fiset]

still scoring A+ on ssllabs...