stackoom
  简体   繁体   中英

Firebase Chrome Extension - Refused to execute inline script because it violates the following Content Security Policy directive

 原文  2018-01-10 14:47:25  9   2    javascript/ google-chrome/ firebase/ google-chrome-extension

Question

Getting this error when trying to run this as an extension, any thoughts??

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' https://cdn.firebase.com https://*.firebaseio.com". Either the 'unsafe-inline' keyword, a hash ('sha256-SDElGe7fYNO4sezC+axo6JiF5P5uY6qAiaLldxOYZXk='), or a nonce ('nonce-...') is required to enable inline execution.

html 

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <title></title>

    <script src='https://cdn.firebase.com/js/client/2.2.1/firebase.js'></script>
    <script>
      // Initialize Firebase
      var config = {
        apiKey: "**",
        authDomain: "**",
        databaseURL: "**",
        projectId: "**",
        storageBucket: "**",
        messagingSenderId: "**"
      };
      firebase.initializeApp(config);
    </script>

    <script defer type="text/javascript" src="js/app.js"></script>

  </head>
  <body>

    <div id="myApp">
        <input id="name" type="text" name="name" placeholder="Name"> <br>
        <input id="birth" type="text" name="birth" placeholder="Birthdate">
        <input id="submit" type="submit" value="Go" name="submit">
    </div>

    <div id="births" class="births"></div>

  </body>
</html>

Manifest.json

{
  "name": "Test",
  "manifest_version": 2,
  "version": "0.1",
  "content_security_policy": "script-src 'self' https://cdn.firebase.com https://*.firebaseio.com; object-src 'self'",


  "browser_action": {
  "default_title":"Test",
  "default_popup": "index.html"
  },
}

2 answers

solution1
 0  2021-02-03 23:03:56

此视频在这里可以帮助你......我花了几个小时试图找出如何解决呢

solution2
 -1  2018-01-12 00:51:59

You can't load code from the web, only from a package. This is because hackers could use that Javascript as a home base as shown here.

Rescource(s): https://developer.chrome.com/extensions/contentSecurityPolicy

暂无
暂无

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

Related Question Chrome extension policy error: Refused to execute inline event handler because it violates the following Content Security Policy directive Refused to execute inline script because it violates the following Content Security Policy directive Cordova error: Refused to execute inline script because it violates the following Content Security Policy directive Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'" Chrome Extension “Refused to load the script because it violates the following Content Security Policy directive” Chrome Extension “Refused to load the script because it violates the following Content Security Policy directive” Javascript throwing : Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self' Gmail Chrome Extension "Refused to load script because it violates the following Content Security Policy directive: "script-src 'self'". Manifest v3 I keep getting the error "Refused to execute inline event handler because it violates the following Content Security Policy directive Refused to load the script because it violates the following Content Security Policy directive
Related Tags
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM