Content Security Policy for script-src in SharePoint 2019 Onpremise
I would like to check if anyone could access on the content-security-policy for SharePoint 2019 onpremise. My appscan has detected and mandated the use of CSP for frame-ancestors, object-src and script-src. I'm facing issue with script-src it seemed that it requires the use of 'unsafe-inline' and 'unsafe-eval' which the IT security team disagree. Is there any way to set script-src without the use of 'unsafe-inline' and 'unsafe-eval'? Here is my CSP: Content-Security-Policy: frame-ancestors 'self' https://domain.com/; object-src 'self' https://domain.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval'
WCF Service Hosted In IIS Unable to Connect to SQL Server and display In SharePoint Online External
Hello , I have Hosted a WCF service in IIS and I am using SharePoint designer 2013 to connect to BCS of SharePoint online. I am able to create the external content type and external content list but when I access the external list I am getting the below error A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) I have given all the required permission in SQL server to make it accessible and have checked it its accessible I have hosted the same WCF service which is hosted in IIS in Azure App Service and its working fine and the data is getting pulled and being displayed in External list below is my web config of WCF Service Can you please help me Thank you Syed Shadab Mohammed
Back to the Basics - How Is SharePoint Utilizing IIS? Sites Stopped Still Work
Hello, Everybody. I'm somewhat new to SharePoint administration but for the past year and a half I've been deploying new sites and digging in to some more advanced aspects of the system. However, today I was surprised when one of my SharePoints sites that was in a stopped state in IIS continued to function. Then I tested on another site and got the same results. This made me realize I must be missing something about the SharePoint architecture and how it utilizes IIS. A few details... I have around 15 sites. Some are marked to require SNI, and some are not. All run on ports 80 and 443 with a redirect rule in place. The two sites I tested by stopping both require SNI. Why is it the site can continue to load for the clients when the site is stopped in IIS? What am I missing? Thank You, Ryan
404 error while accessing SP Server Site 2013
404 error while accessing SP Server Site 2013. This is an intermittent issue. We recently had a crypto attack on all servers hence everything was turned off. When everything was settled, we started the server, application pools, did IIS reset,reboot of server. however all users are still facing issues while accessing all the sharepoint sites. They are receiving: Server Error in '/' Application. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Can someone advise on this? thank you
