Hi,
I’m having trouble joining a Team workspace via email invitation. The process partially succeeds but then fails and rolls back. Here’s the full sequence:
Steps to reproduce:
1. Received a Team invitation email from the workspace admin
2. Clicked the join link in the email
3. The page opened on chatgpt.com but immediately showed Internal Server Error (500)
4. Browser console showed a Content Security Policy violation:
Executing inline script violates the following Content Security Policy directive: ‘default-src ‘none’’.
Either the ‘unsafe-inline’ keyword, a hash (‘sha256-…’), or a nonce (‘nonce-…’) is required to enable inline execution.
Note also that ‘script-src’ was not explicitly set, so ‘default-src’ is used as a fallback.
5. Refreshed the page → it loaded a /cloud endpoint and seemed to work
6. Checked the profile menu (top-right) → the Team workspace was listed
7. Clicked to switch to the Team workspace → another 500 error
8. Refreshed again → the Team completely vanished from my account
It’s a repeating cycle: join → briefly visible → switch fails → disappears.
What I’ve tried:
- Multiple browser refreshes — same cycle each time
- Different browsers (Chrome, Safari)
- Incognito mode
- Direct connection (no proxy/VPN)
Environment:
- OS: macOS
- Account: personal account, no existing Plus subscription
- Invited by: workspace admin via email invitation link
My observations:
- The CSP error on the invite landing page suggests default-src ‘none’ is set without a script-src directive, blocking all inline scripts
- The Team briefly appearing then disappearing looks like a transaction that starts but gets rolled back when the workspace initialization fails
- The 500 errors seem to occur on workspace-related backend calls, not just the landing page
Questions:
1. Is the CSP misconfiguration on the invitation page a known issue?
2. Should the admin add me directly via the Members page instead of using the invitation link?
3. Is there any workaround while this is being investigated?
Thanks.