diff --git a/_config.yml b/_config.yml index 555525f5dd..dbe48c78ea 100644 --- a/_config.yml +++ b/_config.yml @@ -673,10 +673,10 @@ baseurl: /blazor-ui enable_blazorRepl: true ## Latest UI for Blazor version. Used in some articles -uiForBlazorLatestVersion: "6.2.0" +uiForBlazorLatestVersion: "7.0.0" ## Compatible theme version for CDN URLs -themesVersion: "8.2.1" +themesVersion: "9.1.0" ## Product product: "Telerik UI for Blazor" diff --git a/troubleshooting/csp.md b/troubleshooting/csp.md index 1ab81a0a8e..12d189fb8b 100644 --- a/troubleshooting/csp.md +++ b/troubleshooting/csp.md @@ -28,31 +28,42 @@ Telerik UI for Blazor components need the following exceptions to strict CSP. So * Allow inline styles (`'unsafe-inline'`) to use component parameters such as `Width`, `Height`, `RowHeight`, `ItemHeight`, `Top`, `Left`, etc. In addition, some components rely on inline styles for their rich functionality and UX. * Allow data URIs (`data:`) for images that are embedded in the [CSS themes]({%slug themes-overview%}). These images are used for styled checkboxes and radio buttons, Slider ticks, and others. -* *(starting from version 6.0.0)* Allow script evaluation (`'unsafe-eval'`), which is required by the [Spreadsheet]({%slug spreadsheet-overview%}) for cell validation and formula compilation. If you don't use the Spreadsheet component in your Blazor app, then check section [Build CSP Compliant telerik-blazor.js](#build-csp-compliant-telerik-blazorjs) below. -* Allow `https://blazor.cdn.telerik.com` as a source when using [the Telerik CDN]({%slug common-features-cdn%}) for styles or scripts. +* (optional) Allow `https://blazor.cdn.telerik.com` as a source when using [the Telerik CDN]({%slug common-features-cdn%}) for styles or scripts. +* (optional) Allow `https://unpkg.com` as a source when using it as a CDN for styles. + +### Legacy Settings The following items concern older product versions: -* *(up to version 4.4.0)* Allow `unsafe-eval` to use [Chart label templates]({%slug components/chart/label-template-format%}). These templates used to rely on `eval()`. Since version 4.5.0, the Chart labels support a different template mechanism, which doesn't require `unsafe-eval`. +* *(for versions 6.x)* Allow script evaluation (`'unsafe-eval'`), which is required by the [Spreadsheet]({%slug spreadsheet-overview%}) for cell validation and formula compilation. If you don't use the Spreadsheet component in your Blazor app, you can [build a CSP compliant `telerik-blazor.js` file without the Spreadsheet]({%slug common-kb-remove-components-from-telerik-blazor-js%}). * *(up to version 4.6.0)* Allow `data:` URIs for `font-src` to use [font icons]({%slug common-features-icons%}). Later versions use a separate file for the `WebComponentsIcons` icon font. This font file is referenced by the [font icon stylesheet]({%slug common-features-icons%}#font-icon-stylesheet). +* *(up to version 4.4.0)* Allow `unsafe-eval` to use [Chart label templates]({%slug components/chart/label-template-format%}). These templates used to rely on `eval()`. Since version 4.5.0, the Chart labels support a different template mechanism, which doesn't require `unsafe-eval`. -## Example +## Examples -The CSP policy directives below ensure that the Telerik Blazor components work as expected. You can remove the Telerik domain or `font-src` if you don't use our CDN or font icons. +The CSP policy directives below ensure that the Telerik Blazor components work as expected. ->caption CSP for Telerik UI for Blazor {{site.uiForBlazorLatestVersion}} +>caption CSP for Telerik UI for Blazor {{site.uiForBlazorLatestVersion}} with SVG icon support and without CDN
````HTML ```` -## Build CSP Compliant telerik-blazor.js +>caption CSP for Telerik UI for Blazor {{site.uiForBlazorLatestVersion}} with CDN and font icon support + +
-If strict CSP compliance is a hard requirement and your Blazor app is not using the Spreadsheet component, then you can [rebuild the `telerik-blazor.js` file without the Spreadsheet component]({%slug common-kb-remove-components-from-telerik-blazor-js%}). +````HTML + +````