Hello! I’m have problem with CSP, how to fix this? [screen] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src https://mydomain.com/logs/ https://mydomain.com/sidekiq/ https://mydomain.com/mini-profiler-resources/ https://mydomain.com/…

It’s not my forte, but I’ve had a search and you may need to rewrite the inline script you’re trying to use: [이미지] Refuse to reload script (CORS) with my settings That error means you are trying to run a script inline, which is disallowed by your current CSP configuration. You have two options: …

I don’t want to disable CSP protection and I don’t have external scripts, I tried to disable all the plugins and the components of the topic, it didn’t help. I try add all this link to content security policy script src in the admin setting, problem was safe :frowning: https://mydomain.com/logs/ h…

You need to share your site URL for we to be able to help you.

Hm… It seems I found the reason, it seems that the problem occurs because I use the meta tag CSP in my theme: <meta http-equiv="Content-Security-Policy" content="img-src https://imgur.com https://giphy.com"> I need to use the img-src directive to limit the display of images from prohibited hosts. …

Oh that CSP directive will indeed break Discourse completely.

How I can change the default CSP directives in header, to added img-src without use meta tag? I’m try this in Rails, but nothing change: Rails.application.config.action_dispatch.default_headers.merge!({'Content-Security-Policy' => "upgrade-insecure-requests; base-uri 'self'; object-src 'none'; scri…

I’m delete this meta tag, bebuild and problem was safe :frowning:

CSP 문제 해결 방법

제품 지원

JammyDodger 3월 9, 2022, 4:30오후 2

제 전문 분야는 아니지만, 찾아본 결과 사용하려는 인라인 스크립트를 다시 작성해야 할 수도 있습니다:

글		댓글	조회수
Refuse to reload script (CORS) with my settings Product Support	1	1177	1월 31, 2021
After upgrade the content security policy script src for GTM Data & reporting	4	1986	4월 13, 2021
Can't get script tag to work in landing pages plugin due to content-security-policy Product Support	4	286	7월 1, 2025
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25748	6월 13, 2023
Add CSP nonce-source support Development	11	4256	11월 2, 2018

CSP 문제 해결 방법

Related topics