Apache Cordova：CSP错误

Question

I have a problem with the Android 5.0 Lollipop and Google Maps Api, i have an CSP Error of unsafe-eval.

Here is the Error:

https://maps.googleapis.com/maps-api-v3/api/js/22/7/intl/es_ALL/main.js:65

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src * 'unsafe-inline'".

The Code:

<meta http-equiv="Content-Security-Policy" content="default-src * 'unsafe-inline'; style-src 'self' 'unsafe-inline'; script-src: 'self' 'unsafe-inline' 'unsafe-eval'">

Inside my config.xml i have this:

    <plugin name="cordova-plugin-whitelist" version="1" />
<access origin="*" />

I have no problems with Android 4.x but just only with 5.x, i know it's because of the Chromium Webview but i can't use the Google Maps because of this error.

What can i do to fix this ?

Thanks !

Answer 1

尝试稍微重构一下您的Content-Security-Policy元标记，在使用Google Maps的Cordova 5 / Android 5应用中，我可以进行以下操作（位置与您不同：

<meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'">