BigRyan on Nostr: Holy crap. spent 3 hours debugging a grey screen of death on mobile site worked ...
Holy crap.
spent 3 hours debugging a grey screen of death on mobile
site worked perfectly on desktop. iphone? grey void. nothing. no errors, no logs, no clues.
dove into safari web inspector. body was 390x0. fixed the height chain. still grey.
added inline styles. still grey.
added diagnostic text to #root. it flashed and vanished. react was mounting and immediately rendering nothing.
wrapped everything in error boundaries and global error handlers. finally the truth appeared in big red letters on my phone screen:
SecurityError: WebSocket operation is insecure
turns out my CSP allowed
https://*.supabase.co but not wss://*.supabase.co
desktop safari: shrug, let it through
mobile webkit: absolutely not
one line fix. added wss:// to connect-src. site loads.
mobile webkit doesn't mess around with your content security policy. respect.
#btc
Published at
2026-04-15 02:55:04 UTCEvent JSON
{
"id": "624f78f17c7a625d83dc30274d7b4005cafa6a64e0ea449cd86c62ecda0a968a",
"pubkey": "243f3cb9ec89e06102b8a66d4a620b8bec2ba98e312ed17bff3017de6ba1391b",
"created_at": 1776221704,
"kind": 1,
"tags": [
[
"imeta",
"url https://image.nostr.build/19ff594bb9e4bb1be9c2fd5ffd7faec5dd12da552071cbabc2999289137dbcc2.jpg",
"blurhash e~Q8fBWCofj[j@D4kCWCayayEMj[ayfRayGZayj[bHfQKif8fkfQfP",
"dim 1170x1995"
],
[
"t",
"root"
],
[
"t",
"btc"
],
[
"r",
"https://image.nostr.build/19ff594bb9e4bb1be9c2fd5ffd7faec5dd12da552071cbabc2999289137dbcc2.jpg"
]
],
"content": "Holy crap.\n\nspent 3 hours debugging a grey screen of death on mobile\n\nsite worked perfectly on desktop. iphone? grey void. nothing. no errors, no logs, no clues.\n\ndove into safari web inspector. body was 390x0. fixed the height chain. still grey.\n\nadded inline styles. still grey.\n\nadded diagnostic text to #root. it flashed and vanished. react was mounting and immediately rendering nothing.\n\nwrapped everything in error boundaries and global error handlers. finally the truth appeared in big red letters on my phone screen:\n\nSecurityError: WebSocket operation is insecure\n\nturns out my CSP allowed https://*.supabase.co but not wss://*.supabase.co\n\ndesktop safari: shrug, let it through\nmobile webkit: absolutely not\n\none line fix. added wss:// to connect-src. site loads.\n\nmobile webkit doesn't mess around with your content security policy. respect. \n\n#btc \n\nhttps://image.nostr.build/19ff594bb9e4bb1be9c2fd5ffd7faec5dd12da552071cbabc2999289137dbcc2.jpg",
"sig": "0ca2b8feb46ea84166bee70125d4e80ad0b8afeee10abc49de17a8800a97e1e0128bd4ec123ce0f9c87600c64d8da0db0f2329697f385f7e5d4e9a23d2a06487"
}
