Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The number of URLs is increasing for 'CSP: script-src unsafe-inline' and 'CSP: style-src unsafe-inline' after fixing 'CSP: Wildcard Directive' #313

Open
elenastanul87 opened this issue Jun 4, 2024 · 0 comments

Comments

@elenastanul87
Copy link

Hello.

  1. I has the next report:
    image
    The value of CSP was
    "default-src 'self'; script-src 'self' cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' validator.swagger.io bootswatch.com getbootstrap.com data:; style-src 'self' cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' cdn.jsdelivr.net data:; connect-src 'self' bootswatch.com;"
  2. I fixed CSP: Wildcard Directive by adding form-action 'self'; frame-ancestors 'self' and received the next report:
    image
  3. My question is why the number of URLs in CSP: script-src unsafe-inline and CSP: style-src unsafe-inline was increased?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant