dimanche 3 juin 2018

CSP header issues with eval()

I am developing a site, which is still local. I installed this package to add the correct CSP to my site (which I built with Laravel & VueJs).

I have solved them one by one. But now in my chrome console, I don't see any CSP errors anymore. It only shows a blank page. I opened the site in Firefox. There, in the console, I came across the following error:

Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src”). Source: call to eval() or related function blocked by CSP.

I searched the generated bundles for the eval() function, but it doesn't appear in any of the files. Does anyone here have some suggestions for me on how to solve this?



via Chebli Mohamed

Aucun commentaire:

Enregistrer un commentaire