Refused to load the stylesheet because it violates the following Content Security Policy directive: "style-src 'self' 'unsafe-inline'"

Question

I m trying to load an external popup form created with a third-party tool. I keep getting this error about CSP violations. Thing is I can load them correctly locally and they are only blocked when I deploy them on my provider's server. I dont know where these policies are coming from since I havent defined anything in .htaccess file (PHP web app with codeigniter) I checked all the relevant answers but nothing worked for me.

Refused to load the script because it violates the following Content Security Policy directive

because it violates the following Content Security Policy directive: "style-src 'self'"

I also tried several versions of <meta http-equiv="Content-Security-Policy" but again no luck.

Answer 1

It needs to be fixed on the server side. Please update the policy on server.

Answer 2

您在元标记中缺少style-src。

<meta http-equiv="Content-Security-Policy" content="style-src 'self' https://domaingoeshere.com/css/fonts.css 'unsafe-inline' 'unsafe-eval'">