violates the following Content Security Policy directive
up vote
0
down vote
favorite
When I Upload a Image into my web APP, it showing below error
Refused to load the image '
<URL>because it violates the following Content Security Policy directive: "default-src * data: 'unsafe-eval' 'unsafe-inline'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
I try to solve this error by using following code
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *">
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
but it is not working, could any one please help in this regard
javascript html
google-chrome content-security-policy asked Nov 19 at 6:40
Hari Krish
638
add a comment |
up vote
0
down vote
favorite
When I Upload a Image into my web APP, it showing below error
Refused to load the image '
<URL>because it violates the following Content Security Policy directive: "default-src * data: 'unsafe-eval' 'unsafe-inline'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
I try to solve this error by using following code
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *">
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
but it is not working, could any one please help in this regard
javascript html
google-chrome content-security-policy asked Nov 19 at 6:40
Hari Krish
638
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
When I Upload a Image into my web APP, it showing below error
Refused to load the image '
<URL>because it violates the following Content Security Policy directive: "default-src * data: 'unsafe-eval' 'unsafe-inline'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
I try to solve this error by using following code
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *">
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
but it is not working, could any one please help in this regard
javascript html
google-chrome content-security-policy asked Nov 19 at 6:40
Hari Krish
638
When I Upload a Image into my web APP, it showing below error
Refused to load the image '
<URL>because it violates the following Content Security Policy directive: "default-src * data: 'unsafe-eval' 'unsafe-inline'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
I try to solve this error by using following code
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *">
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
but it is not working, could any one please help in this regard
javascript html
google-chrome content-security-policy javascript html
google-chrome content-security-policy asked Nov 19 at 6:40
Hari Krish
638
asked Nov 19 at 6:40
Hari Krish
638
asked Nov 19 at 6:40
Hari Krish
638
asked Nov 19 at 6:40
Hari Krish
638
asked Nov 19 at 6:40
Hari Krish
638
638
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
up vote
0
down vote
Not sure why you are using an "*", i am using similar kind of stuff but my meta tag looks something like this and it works fine for me.
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">Hope this helps
answered Nov 20 at 15:56
Abinash
63
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
Not sure why you are using an "*", i am using similar kind of stuff but my meta tag looks something like this and it works fine for me.
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">Hope this helps
answered Nov 20 at 15:56
Abinash
63
add a comment |
up vote
0
down vote
Not sure why you are using an "*", i am using similar kind of stuff but my meta tag looks something like this and it works fine for me.
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">Hope this helps
answered Nov 20 at 15:56
Abinash
63
add a comment |
up vote
0
down vote
up vote
0
down vote
Not sure why you are using an "*", i am using similar kind of stuff but my meta tag looks something like this and it works fine for me.
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">Hope this helps
answered Nov 20 at 15:56
Abinash
63
Not sure why you are using an "*", i am using similar kind of stuff but my meta tag looks something like this and it works fine for me.
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">Hope this helps
<meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; connect-src 'self';font-src 'self'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'">answered Nov 20 at 15:56
Abinash
63
answered Nov 20 at 15:56
Abinash
63
answered Nov 20 at 15:56
Abinash
63
answered Nov 20 at 15:56
Abinash
63
63
add a comment |
add a comment |
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53369507%2fviolates-the-following-content-security-policy-directive%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
