Hello! I’m have problem with CSP, how to fix this? [screen] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src https://mydomain.com/logs/ https://mydomain.com/sidekiq/ https://mydomain.com/mini-profiler-resources/ https://mydomain.com/…

It’s not my forte, but I’ve had a search and you may need to rewrite the inline script you’re trying to use: [صورة] Refuse to reload script (CORS) with my settings That error means you are trying to run a script inline, which is disallowed by your current CSP configuration. You have two options…

I don’t want to disable CSP protection and I don’t have external scripts, I tried to disable all the plugins and the components of the topic, it didn’t help. I try add all this link to content security policy script src in the admin setting, problem was safe :frowning: https://mydomain.com/logs/ h…

You need to share your site URL for we to be able to help you.

Hm… It seems I found the reason, it seems that the problem occurs because I use the meta tag CSP in my theme: <meta http-equiv="Content-Security-Policy" content="img-src https://imgur.com https://giphy.com"> I need to use the img-src directive to limit the display of images from prohibited hosts. …

Oh that CSP directive will indeed break Discourse completely.

How I can change the default CSP directives in header, to added img-src without use meta tag? I’m try this in Rails, but nothing change: Rails.application.config.action_dispatch.default_headers.merge!({'Content-Security-Policy' => "upgrade-insecure-requests; base-uri 'self'; object-src 'none'; scri…

I’m delete this meta tag, bebuild and problem was safe :frowning:

كيفية إصلاح مشكلة مع CSP

الدعم

JammyDodger 9 مارس 2022، 4:30م 2

ليس من اختصاصي، ولكني أجريت بحثًا وقد تحتاج إلى إعادة كتابة البرنامج النصي المضمن الذي تحاول استخدامه:

الموضوع		الردود	مرات العرض
Refuse to reload script (CORS) with my settings Support	1	1141	31 يناير 2021
After upgrade the content security policy script src for GTM Data & reporting	4	1921	13 أبريل 2021
Can't get script tag to work in landing pages plugin due to content-security-policy Support	4	183	1 يوليو 2025
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	24878	13 يونيو 2023
Add CSP nonce-source support Development	11	4075	2 نوفمبر 2018

كيفية إصلاح مشكلة مع CSP

الموضوعات ذات الصلة