镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

CSP error for inline event handler when CSP directives are configured  #81

Open

Description

@chandanch

I'm getting this error:
Refused to execute inline event handler because it violates the following Content Security Policy directive
My current script src values:

'unsafe-hashes' 'nonce-EDNnf03nceIOfn39fn3e9h3sdfa' 'nonce-EDNnf03nceIOfn39fn3e9h3sdrtyr' 'self' https://*.intercom.io https://*.intercomcdn.com https://*.walkme.com http://*.cloudflare.com 

react-ckeditor-component version: 1.1.0

A workaround would be to set unsafe-inline within script-src but that would put the react-app under some risk.

Any other way to mitigate this issue?

Activity

  1. changed the title [-]CSP error for inline event handler since when CSP directives are configured [/-] [+]CSP error for inline event handler when CSP directives are configured [/+] on Mar 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions