简体繁体中英

Refused to execute inline script because it violates the following Content Security Policy directive

原文 2017-10-15 20:56:54 3 2 javascript/ google-chrome

Suddenly, this morning users reported that JS does not wokr in Chrome anymore for our website, with multiple exceptions like

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-ZJh1uUuWvO0I....uclbveH9owCmb/18HI3OU='), or a nonce ('nonce-...') is required to enable inline execution.

and

because it violates the following Content Security Policy directive: "script-src 'self'".

Seems like Chrome gets updated.... The current version installed on my machine

Version 61.0.3163.100 (Official Build) (64-bit)

We don't set security policy explicitly so I don't get where it is coming from. Firefox and IE work. Does anyone have the same problems? Any help appreciated.

2 answers

A bit rough on my side to blame Chrome for the issue. it turns out that the network team enforced security policy rules by adding headers to the response, and as result all JS now blocked. The headers they added are:

鉴于新信息，唯一的解决方案是确保您的脚本与加载它们的页面位于同一主机上

Cordova error: Refused to execute inline script because it violates the following Content Security Policy directive

Firebase Chrome Extension - Refused to execute inline script because it violates the following Content Security Policy directive

Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'"

Chrome extension policy error: Refused to execute inline event handler because it violates the following Content Security Policy directive

Javascript throwing : Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'

I keep getting the error "Refused to execute inline event handler because it violates the following Content Security Policy directive

Refused to load the script because it violates the following Content Security Policy directive

Refused to load the script because it violates the following Content Security Policy directive: "style-src 'self' 'unsafe-inline'

jQuery: Refused to apply inline style because it violates the following Content Security Policy directive

Refused to apply inline style because it violates the following Content Security Policy directive

暂无

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

Related Tags

Refused to execute inline script because it violates the following Content Security Policy directive

Question

2 answers

solution1
1 2017-10-15 22:02:12

solution2
0 2017-10-15 22:08:18

Refused to execute inline script because it violates the following Content Security Policy directive

Question

2 answers

solution1 1 2017-10-15 22:02:12

solution2 0 2017-10-15 22:08:18

solution1
1 2017-10-15 22:02:12

solution2
0 2017-10-15 22:08:18