ScrollSpy is a bad espionage agent 🥷 - errors

[jobannon]

Visit this page

https://fusionauth.io/docs/lifecycle/migrate-users/bulk/general#migrating-saml-configuration

and see this error

Uncaught TypeError: document.querySelector(...) is null
    #handleScroll https://fusionauth.io/js/ScrollSpy-0.1.0.js:36
    ScrollSpy https://fusionauth.io/js/ScrollSpy-0.1.0.js:13
28 [ScrollSpy-0.1.0.js:36:28](https://fusionauth.io/js/ScrollSpy-0.1.0.js)
Uncaught TypeError: document.querySelector(...) is null
    #handleScroll https://fusionauth.io/js/ScrollSpy-0.1.0.js:36
    ScrollSpy https://fusionauth.io/js/ScrollSpy-0.1.0.js:13
28 [ScrollSpy-0.1.0.js:36:28](https://fusionauth.io/js/ScrollSpy-0.1.0.js)
Uncaught TypeError: null has no properties
    #handleScroll https://fusionauth.io/js/ScrollSpy-0.1.0.js:36
    ScrollSpy https://fusionauth.io/js/ScrollSpy-0.1.0.js:13
4 [ScrollSpy-0.1.0.js:36:28](https://fusionauth.io/js/ScrollSpy-0.1.0.js)
    #handleScroll https://fusionauth.io/js/ScrollSpy-0.1.0.js:36
    ScrollSpy https://fusionauth.io/js/ScrollSpy-0.1.0.js:13

Other warnings around CSP can possibly be reviewed as well

Loading failed for the <script> with source “https://tag.clearbitscripts.com/v1/pk_756e40cd390bd96c9575d58b82294015/tags.js”. [general:1:1](https://fusionauth.io/docs/lifecycle/migrate-users/bulk/general)
Content-Security-Policy warnings 4
Content-Security-Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified [anchor](https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lck4YwlAAAAAEIE1hR--varWp0qu9F-8-emQn2v&co=aHR0cHM6Ly9mdXNpb25hdXRoLmlvOjQ0Mw..&hl=en&type=image&v=u-xcq3POCWFlCr3x8_IPxgPu&theme=light&size=invisible&badge=bottomright&cb=e664flb3n8uy)
Content-Security-Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified [anchor](https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lck4YwlAAAAAEIE1hR--varWp0qu9F-8-emQn2v&co=aHR0cHM6Ly9mdXNpb25hdXRoLmlvOjQ0Mw..&hl=en&type=image&v=u-xcq3POCWFlCr3x8_IPxgPu&theme=light&size=invisible&badge=bottomright&cb=e664flb3n8uy)
Content-Security-Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified [anchor](https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lck4YwlAAAAAEIE1hR--varWp0qu9F-8-emQn2v&co=aHR0cHM6Ly9mdXNpb25hdXRoLmlvOjQ0Mw..&hl=en&type=image&v=u-xcq3POCWFlCr3x8_IPxgPu&theme=light&size=invisible&badge=bottomright&cb=e664flb3n8uy)
Content-Security-Policy: Ignoring “'unsafe-inline'” within script-src: nonce-source or hash-source specified [anchor](https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lck4YwlAAAAAEIE1hR--varWp0qu9F-8-emQn2v&co=aHR0cHM6Ly9mdXNpb25hdXRoLmlvOjQ0Mw..&hl=en&type=image&v=u-xcq3POCWFlCr3x8_IPxgPu&theme=light&size=invisible&badge=bottomright&cb=e664flb3n8uy)
Partitioned cookie or storage access was provided to “https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lck4YwlAAAAAEIE1hR--varWp0qu9F-8-emQn2v&co=aHR0cHM6Ly9mdXNpb25hdXRoLmlvOjQ0Mw..&hl=en&type=image&v=u-xcq3POCWFlCr3x8_IPxgPu&theme=light&size=invisible&badge=bottomright&cb=e664flb3n8uy” because it is loaded in the third-party context and dynamic state partitioning is enabled.

Ignoring unsupported entryTypes: longtask. [recaptcha__en.js:479:236](https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js)
Request to access cookie or storage on “<URL>” was blocked because it came from a tracker and content blocking is enabled. 5
Some cookies are misusing the recommended “SameSite“ attribute 5