Forum Discussion
Manasi30
Aug 16, 2023Copper Contributor
.NET Runtime 8 preview for content security policy regarding Blazor Webassembly eval()
Working on Blazor webassembly app which is hosted and executed on an embedded browser of FDI runtime environment. Though we changed the CSP in the application in meta tag
<meta charset="utf-8" http-equiv="Content-Security-Policy" content="base-uri 'self'; default-src 'none'; img-src 'self' data: https:; object-src 'none'; connect-src 'self' ; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests;">
and used unsafe-eval it gives errors on console as attached. Tested with .NET Runtime 8 preview 7 but errors still exist.
Any chances to have the fix in the .NET Runtime 8 regarding webassembly CSP error. Please refer https://github.com/dotnet/aspnetcore/issues/37787
No RepliesBe the first to reply