Error map

Permissions policy violation Console: [Violation] Permissions policy violation: camera is not allowed in this document (Feature-Policy)

Browser · layer 1, On your device

Open the full error page →

Centre: this error. First ring: errors it is linked with (7). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Permissions policy violation — Console: [Violation] Permissions policy violation: camera is not allowed in this document (Feature-Policy) (Browser)Permissions…Geolocation permission denied — Console: User denied Geolocation / Only secure origins are allowed (geolocation) / GeolocationPositionError code 1 (Browser)Geolocation permiss…HSTS — Chrome: You cannot visit example.com right now because the website uses HSTS (NET::ERR_CERT_… no bypass) (Browser)HSTSRefused to display in a frame — Console: Refused to display 'https://…' in a frame because it set 'X-Frame-Options' to 'deny' / 'sameorigin' (Browser)Refused to display …Aw, Snap! — Chrome: Aw, Snap! Something went wrong while displaying this webpage. Error code: STATUS_ACCESS_VIOLATION / SIGILL / Out of Memory (Browser)Aw, Snap!NotAllowedError: Permission denied — Console: NotAllowedError: Permission denied (getUserMedia — camera or microphone blocked) (Browser)NotAllowedError: Pe…Failed to execute postMessage — Console: Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://a.com') does not match the recipient window's origin ('https://b.com') (Browser)Failed to execute p…blocked a frame — SecurityError: Blocked a frame with origin "x" from accessing a cross-origin frame. (JavaScript)blocked a frameclipboard write blocked — NotAllowedError: Failed to execute 'writeText' on 'Clipboard': Document is not focused. (JavaScript)clipboard write blo…captive portal — Browser: This network requires you to sign in — captive portal (hotel, airport, café Wi-Fi) blocking HTTPS sites (Browser)captive portalUnchecked runtime.lastError — Console: Unchecked runtime.lastError: The message port closed before a response was received (extension message) (Browser)Unchecked runtime.l…ERR_CERT_AUTHORITY_INVALID — NET::ERR_CERT_AUTHORITY_INVALID (Your connection is not private) (JavaScript)ERR_CERT_AUTHORITY_…ERR_CERT_DATE_INVALID — NET::ERR_CERT_DATE_INVALID (certificate expired) (JavaScript)ERR_CERT_DATE_INVAL…ERR_CONNECTION_CLOSED — Chrome: This site can’t be reached — example.com unexpectedly closed the connection. ERR_CONNECTION_CLOSED (Browser)ERR_CONNECTION_CLOS…CSP violation — Refused to load the script because it violates the following Content Security Policy directive (JavaScript)CSP violationSameSite cookie blocked — This Set-Cookie was blocked because it had the "SameSite=Lax" attribute but came from a cross-site response / SameSite=None requires Secure (Authentication)SameSite cookie blo…MEMORY_MANAGEMENT — Blue Screen: MEMORY_MANAGEMENT (Stop code 0x0000001A) (Windows)MEMORY_MANAGEMENTinvalid array length — RangeError: Invalid array length (JavaScript)invalid array lengthERR_CONTENT_DECODING_FAILED — Chrome: This page isn’t working — sent an invalid response. ERR_CONTENT_DECODING_FAILED (Browser)ERR_CONTENT_DECODIN…autoplay blocked — NotAllowedError: play() failed because the user didn't interact with the document first. (JavaScript)autoplay blockedNotFoundError: Requested device not found — Console: NotFoundError: Requested device not found (getUserMedia has no camera or microphone) (Browser)NotFoundError: Requ…NotReadableError: Could not start video source — Console: NotReadableError: Could not start video source (camera in use by another app) (Browser)NotReadableError: C…Script error. — Script error. (at line 0) — cross-origin error details hidden (JavaScript)Script error.The canvas has been tainted by cross-origin data — Console: SecurityError: Failed to execute 'toDataURL' / 'getImageData' on 'HTMLCanvasElement': Tainted canvases may not be exported (Browser)The canvas has been…CORS — CORS Error: No 'Access-Control-Allow-Origin' header is present (API)CORSMixed Content — Mixed Content: The page was loaded over HTTPS, but requested an insecure resource (API)Mixed ContentAbortError — AbortError: The user aborted a request. / signal is aborted without reason (JavaScript)AbortError

Directly related (7)

Geolocation permission deniedBrowser

Console: User denied Geolocation / Only secure origins are allowed (geolocation) / GeolocationPositionError code 1

`navigator.geolocation` failed because the user blocked location, the page is not on HTTPS, or the OS has location services off.

HSTSBrowser

Chrome: You cannot visit example.com right now because the website uses HSTS (NET::ERR_CERT_… no bypass)

The site told browsers to use only valid HTTPS (HSTS), so Chrome hides the "Proceed anyway" link when its certificate has any pro…

Refused to display in a frameBrowser

Console: Refused to display 'https://…' in a frame because it set 'X-Frame-Options' to 'deny' / 'sameorigin'

The page you tried to embed in an `` forbids framing through the `X-Frame-Options` header or CSP `frame-ancestors`.

Aw, Snap!Browser

Chrome: Aw, Snap! Something went wrong while displaying this webpage. Error code: STATUS_ACCESS_VIOLATION / SIGILL / Out of Memory

A Chrome tab crashed — out of memory, a faulty extension, a graphics/driver issue or a very heavy page.

NotAllowedError: Permission deniedBrowser

Console: NotAllowedError: Permission denied (getUserMedia — camera or microphone blocked)

The user (or the browser/OS/policy) denied camera or microphone access, so `navigator.mediaDevices.getUserMedia()` was rejected.

Failed to execute postMessageBrowser

Console: Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://a.com') does not match the recipient window's origin ('https://b.com')

`window.postMessage()` was sent with a `targetOrigin` that differs from the receiving window's real origin, so the message is dro…

blocked a frameJavaScript

SecurityError: Blocked a frame with origin "x" from accessing a cross-origin frame.

Script tried to read or modify an iframe (or window) from another origin.

Two steps away (19)

clipboard write blockedJavaScript

NotAllowedError: Failed to execute 'writeText' on 'Clipboard': Document is not focused.

The Clipboard API refused to write — the page isn’t focused, there was no user gesture, or the context isn’t secure.

captive portalBrowser

Browser: This network requires you to sign in — captive portal (hotel, airport, café Wi-Fi) blocking HTTPS sites

The Wi-Fi needs a login or acceptance page first; until you complete it, secure sites fail with certificate or connection errors.

Unchecked runtime.lastErrorBrowser

Console: Unchecked runtime.lastError: The message port closed before a response was received (extension message)

A browser extension sent or received a message and the other side closed the channel without replying — almost always an extensio…

ERR_CERT_AUTHORITY_INVALIDJavaScript

NET::ERR_CERT_AUTHORITY_INVALID (Your connection is not private)

The site’s certificate isn’t signed by a CA the browser trusts — self-signed, missing intermediates, or intercepted by a proxy.

ERR_CERT_DATE_INVALIDJavaScript

NET::ERR_CERT_DATE_INVALID (certificate expired)

The site’s certificate has expired (or isn’t valid yet) — or the device clock is wrong.

ERR_CONNECTION_CLOSEDBrowser

Chrome: This site can’t be reached — example.com unexpectedly closed the connection. ERR_CONNECTION_CLOSED

The server closed the connection before finishing the TLS handshake or sending a response — typical for HTTP/HTTPS port mix-ups,…

CSP violationJavaScript

Refused to load the script because it violates the following Content Security Policy directive

The page’s Content-Security-Policy doesn’t allow that script, style, image or connection source.

SameSite cookie blockedAuthentication

This Set-Cookie was blocked because it had the "SameSite=Lax" attribute but came from a cross-site response / SameSite=None requires Secure

The browser refused to store or send an auth/session cookie because of SameSite or Secure rules — so logins don’t “stick” across…

MEMORY_MANAGEMENTWindows

Blue Screen: MEMORY_MANAGEMENT (Stop code 0x0000001A)

Windows detected a severe memory-management error — commonly faulty RAM, unstable memory settings or a bad driver.

invalid array lengthJavaScript

RangeError: Invalid array length

An array was created or resized with a negative, fractional or enormous length.

ERR_CONTENT_DECODING_FAILEDBrowser

Chrome: This page isn’t working — sent an invalid response. ERR_CONTENT_DECODING_FAILED

The response claims to be compressed (gzip/brotli) but cannot be decompressed — it was double-compressed, truncated or not compre…

autoplay blockedJavaScript

NotAllowedError: play() failed because the user didn't interact with the document first.

The browser blocked media autoplay with sound until the user interacts with the page.

NotFoundError: Requested device not foundBrowser

Console: NotFoundError: Requested device not found (getUserMedia has no camera or microphone)

`getUserMedia` found no camera or microphone matching the constraints — the device is missing, disabled or the constraints are to…

NotReadableError: Could not start video sourceBrowser

Console: NotReadableError: Could not start video source (camera in use by another app)

The camera or microphone exists but could not be opened — another application, tab or a driver problem holds it.

Script error.JavaScript

Script error. (at line 0) — cross-origin error details hidden

An error happened in a script from another origin, and the browser hid the details.

The canvas has been tainted by cross-origin dataBrowser

Console: SecurityError: Failed to execute 'toDataURL' / 'getImageData' on 'HTMLCanvasElement': Tainted canvases may not be exported

You drew an image from another origin onto a canvas without CORS permission, so the browser blocks reading pixels back out.

CORSAPI

CORS Error: No 'Access-Control-Allow-Origin' header is present

The browser blocked a cross-origin request because the server’s response didn’t include the CORS headers allowing your site’s ori…

Mixed ContentAPI

Mixed Content: The page was loaded over HTTPS, but requested an insecure resource

An HTTPS page tried to load a script, API or image over plain HTTP, and the browser blocked (or warned about) it.

AbortErrorJavaScript

AbortError: The user aborted a request. / signal is aborted without reason

A fetch was cancelled through an AbortController (or the browser cancelled it).