Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CSP error with Identity login page #37

Merged
merged 1 commit into from
Jun 16, 2022
Merged

Fix CSP error with Identity login page #37

merged 1 commit into from
Jun 16, 2022

Conversation

sei-mkaar
Copy link
Contributor

Identity 1.4.7 throws a Content Security Policy error on the login page:

Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-3ljVrsDzCDTb+OYQGPrI7kFpqM5A5dwwb6HNd6ttNNk='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.

This fix updates the Content Security Policy for the Identity API deployment.

@sei-mkaar sei-mkaar added the bug Something isn't working label Jun 16, 2022
@sei-mkaar sei-mkaar merged commit db188cd into main Jun 16, 2022
@sei-mkaar sei-mkaar deleted the identity-csp-fix branch June 16, 2022 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant