[Vuejs]-Laravel CSP (content security policy) frontegg ui integrate issue

by

0👍

As the error message and https://www.w3.org/TR/CSP2/#directive-script-src say, if you specify hashes or nonces, you can’t specify ‘unsafe-inline’. You should remove ‘nonce-loop’ and nonce-loop from your policy. If you are going to use nonces they should be random and change with each payload.

0👍

After few days of learning now i am able to fix this:

$this->addDirective(Directive::SCRIPT, 'https://*.frontegg.com');
$this->addDirective(Directive::SCRIPT, 'https://www.gstatic.com');
$this->addDirective(Directive::SCRIPT, 'https://assets.frontegg.com');
$this->addDirective(Directive::STYLE, 'https://*.frontegg.com');
$this->addDirective(Directive::STYLE, 'https://www.gstatic.com');
$this->addDirective(Directive::CONNECT, 'https://*.frontegg.com');
$this->addDirective(Directive::IMG, 'https://fronteggprodeustorage.blob.core.windows.net');

Leave a comment