Content
Content-Security-Policy & Netiq Access Manager Form Fill Script
Added by Yago R about 1 year ago
Hello, I am trying to configure the netiq access manager form fill, but when I run the script that requires it, I get this error: The options for this page have blocked the loading of an inline resource (script-src).
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self' https://augur.openproject.com; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://player.vimeo.com https://releases.openproject.com/v1/check.svg; img-src * data: blob:; media-src 'self'; object-src https://releases.openproject.com/v1/check.svg; script-src 'self' 'nonce-fTH0hi2LFzNIlscT/0Fo3ssTxnZbEIP5CioyT0e1j0U=' 'unsafe-inline'; style-src 'self' 'unsafe-inline'
Reviewing this header presented by OpenProject, I think it may require changing the script-src statement. It's possible ?
thanks
Replies (1)
Hello, any ideas for this error? thank you