We are getting security issue due to unsafe-inline in header and as per security team we should use nonce but that one is difficult to use with inline event handler method so we are looking for the option to use 'self' instead of nonce
Can we use 'self' with 'unsafe-Inline' instead of nonce for content security policy?
575 Views Asked by unknown_11 At
1
There are 1 best solutions below
Related Questions in SPRING-MVC
- MDX date range with NON EMPTY clause is not slicing the data for the range
- hide a sub report containing a chart pentaho
- Generating a dynamic date based on a row number using pentaho pdi
- Expired time for acquiring lock pentaho
- "Operation in progress..." Never Ends When Previewing Rows in Kettle Spoon via Salesforce
- How to use component javascript in the Pentahoo Data Integration
- Adding column to existing pentaho reports
- Function in postgres taking too long and how to trace back how many records has been updated
- Report ,subreport pentaho
- Pentaho 5.3 - How to read a property in PRPT files
Related Questions in CONTENT-SECURITY-POLICY
- MDX date range with NON EMPTY clause is not slicing the data for the range
- hide a sub report containing a chart pentaho
- Generating a dynamic date based on a row number using pentaho pdi
- Expired time for acquiring lock pentaho
- "Operation in progress..." Never Ends When Previewing Rows in Kettle Spoon via Salesforce
- How to use component javascript in the Pentahoo Data Integration
- Adding column to existing pentaho reports
- Function in postgres taking too long and how to trace back how many records has been updated
- Report ,subreport pentaho
- Pentaho 5.3 - How to read a property in PRPT files
Related Questions in NONCE
- MDX date range with NON EMPTY clause is not slicing the data for the range
- hide a sub report containing a chart pentaho
- Generating a dynamic date based on a row number using pentaho pdi
- Expired time for acquiring lock pentaho
- "Operation in progress..." Never Ends When Previewing Rows in Kettle Spoon via Salesforce
- How to use component javascript in the Pentahoo Data Integration
- Adding column to existing pentaho reports
- Function in postgres taking too long and how to trace back how many records has been updated
- Report ,subreport pentaho
- Pentaho 5.3 - How to read a property in PRPT files
Related Questions in UNSAFE-INLINE
- MDX date range with NON EMPTY clause is not slicing the data for the range
- hide a sub report containing a chart pentaho
- Generating a dynamic date based on a row number using pentaho pdi
- Expired time for acquiring lock pentaho
- "Operation in progress..." Never Ends When Previewing Rows in Kettle Spoon via Salesforce
- How to use component javascript in the Pentahoo Data Integration
- Adding column to existing pentaho reports
- Function in postgres taking too long and how to trace back how many records has been updated
- Report ,subreport pentaho
- Pentaho 5.3 - How to read a property in PRPT files
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Inline event handlers are not nonceable elements, so you can't allow them with a nonce. Your options are to use 'unsafe-inline' or to rewrite event handling into a file on your server, for which you would need 'self' to load. Adding 'self' will allow files under that directive to load, but will not allow inline event handlers directly.