CSP

Great Reads

by Jeremy Likness

Migrate from Medium to Hugo

Create a Content Security Policy (CSP) in Hugo

by Jeremy Likness

A Content Security Policy (CSP) helps prevent a variety of attacks on your site. This article describes how to implement one for a static website when you don't control the headers.

Latest Articles

Migrate from Medium to Hugo

by Jeremy Likness

Migrate from Medium to Hugo

Create a Content Security Policy (CSP) in Hugo

by Jeremy Likness

A Content Security Policy (CSP) helps prevent a variety of attacks on your site. This article describes how to implement one for a static website when you don't control the headers.

All Articles

top

CSP

Getting “refused to apply inline style because it violates the following content security policy” error

29 May 2019 by MadMyche

It looks like this may be Modernizr not getting along with the sites Content-Security-Policy. Seems to me that you are not the only one experiencing this: Modernizr Causes Content Security Policy (CSP) Violation Errors · Issue #1450 · Modernizr/Modernizr · GitHub[^] Possible workaround Content...

.NET-Core

CSP

Migrate from Medium to Hugo

22 Nov 2019 by Jeremy Likness

Migrate from Medium to Hugo

Getting “refused to apply inline style because it violates the following content security policy” error

29 May 2019 by Nityananda Das

I am getting the below error while running the application Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/ 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='...

.NET-Core

CSP

Getting “refused to apply inline style because it violates the following content security policy” error

29 May 2019 by Richard Deeming

Quote: Either the 'unsafe-inline' keyword, a hash ('sha256-4Su6mBWzEIFnH4pAGMOuaeBrstwJN4Z3pq/s1Kn4/KQ='), or a nonce ('nonce-...') is required to enable inline execution. Neither of the two hashes you've added to your CSP match the inline content you're trying to load. Generate a...

.NET-Core

CSP

Create a Content Security Policy (CSP) in Hugo

21 Nov 2019 by Jeremy Likness

A Content Security Policy (CSP) helps prevent a variety of attacks on your site. This article describes how to implement one for a static website when you don't control the headers.

HTML

Javascript

CSP

Using custom cryptographic service provider from adobe reader

20 Mar 2021 by Member 14649480

Hi, I have developed an custom CSP for digital signature only and i want to use it from applications like adobe reader or microsoft word but I haven't found any relevant article. I have registri. My CSP is PROV_RSA_SIG. What I have tried: I...

CSP

Gridview edit event stopped working after unsafe-inline removed from CSP

19 Jun 2023 by Richard Deeming

The problem is that you're using WebForms - a framework which was last updated at least a decade before the first CSP specification. WebForms emits a buttload of inline scripts, many of which are dynamically generated so you can't add their...

ASP.NET

CSP

Gridview

Gridview edit event stopped working after unsafe-inline removed from CSP

19 Jun 2023 by Magic Wonder

Dear All, As mentioned in subject, I am using GridView in my page. It was working till the time I have unsafe-inline mentioned in content security policy. However, now same has to remove due to security issues. After removing it,...

ASP.NET

CSP

Gridview