This has to do with the Content Security Policy interfering with self-hosted scripts. There are good reasons for doing this - in particular, some types of files users upload, like SVG images, can contain arbitrary JavaScript. I think the MathJax code just needs to be added to whatever whitelist exists for necessary scripts, but I'm not sure how to do that (and it's probably @freemo who has to make the change anyway).
I tested this by disabling CSP in my browser (Waterfox preferences security.csp.*) temporarily - but I do not recommend this as a permanent workaround for reasons outlined above.
@freemo @khird @peterdrake @trinsec
What is the repo?
@khird
I am currently working on trying to get a new version out that fixes this. Also trying to find someone I might be able to hire to work on the QOTO code base part time.
@peterdrake @trinsec