ASPX page

Copper Contributor

Recently pen tester flagged out csp issue with insafe-inline. aspx page  has ajax tool. so handler using scriptresource.axd and webresource.axd files. if we use nonce on our page as per pen tester ajax is not working.  expecting nonce should be inside scri;tresource.axd file also? how to resolve it?

1 Reply

Hi @reeta2023,

Thanks for posting your issue here.

However this platform is used for how-to discussions and sharing best practices for building any app with .NET.Since your issue is a technical question, welcome to post it in Microsoft Q&A forum, the support team and communities on Microsoft Q&A will help you for any technical questions.
Besides, it will be appreciated if you can share it here once you post this technical question Microsoft Q&A.
Best Regards,
Lan Huang