Content-security-policy Questions
Ad
Problems with CSP in the manifest.json file
The script of my first gc extension doesn't work when loaded as .crx . i've checked the debugging section and this is my error: refused to
Multiple ports in content_security_policy in manifest.json
I need to listen more than one port in my chrome extension. my manifest.json content_security_policy
This document requires 'TrustedScriptURL' assignment
After adding require-trusted-types-for 'script'; in my content-security-policy header, which
content security policy (csp) issue for subdomain with nginx as reverse proxy and node express as backand
I have an issue with content security policy headers. scripts and styles are blocked. it seams that nginx is overloading my express
"Lighthouse was unable to download a robots.txt file" despite the file being accessible
I have a nodejs/nextjs app running at http://www.schandillia.com. the
How to use React without unsafe inline JavaScript/CSS code?
Background i have to use a content security policy for a
Chrome extension fetch API - Content Security Policy
My chrome extension should fetch some remote resources from 3rd party api through http request. const getboards = callback => {
Paypal JS SDK Automatically Closes in Sandbox JSP Servlet Web Application
I'm testing a sandbox paypal for a learning project in the jsp servlet. i'm using netbeans ide with the glassfish server and xampp for the
Stripe checkout and object-src
I am trying out stripe's checkout, but it has an error : unrecognized content-security-policy directive 'object-src:'
How can I set a nonce in Material-UI for the Content-Security-Policy?
I have a react app using create-react-app (react-scripts) and material-ui. i would like to apply a strong content-security-policy for my app which
Ad
Is it possible to fetch data from any site in Chrome App?
I am new to chrome app development. i was going to create a simple rss reader as a helloworld project, but now, after reading docs, i am not sure
Use content security policy to avoid inline java script
I have a use case where i serve my react application code form nginx server which get its data from an apache server via post call in json
Content-Security-Policy for Cordova not loading external scripts and stylesheets (404 error)
I currently have the 'content-security-policy' meta tag for cordova set to: <meta http-equiv="content-security-policy"
Implemented CSP in my site, but a 3rd party library uses inline javascript. Can I selectively allow 'unsafe-inline'?
I've implemented csp headers in my public site for security purposes, and have refactored the code to remove any instances of inline javascript
Content security policy. webcomponent. script src DataURI .Can I override HTTP HEADER by META tag?
I am is developing a plugin for shopify cms. this plugin use webcomponents.js to load polymer scripts via script.src =
Ad
Blog Categories
Ad