Share via

Can we use script-src 'self' 'unsafe-inline' in the content security policy of the .net application?

MSUser V 1 Reputation point
2020-11-27T10:44:09.65+00:00

In our asp.net SharePoint application, we have used script-src 'self' 'unsafe-inline' in the content security policy as sharepoint is generating some inline javascript code dynamically at runtime. But CSP validator showed red flag for using 'unsafe-inline'. Could you please suggest we can use 'self' 'unsafe-inline' as sharepoint framework itself has some inline codes or any other recommendation?

C#
C#
An object-oriented and type-safe programming language that has its roots in the C family of languages and includes support for component-oriented programming.
10,995 questions
SharePoint Server Development
SharePoint Server Development
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Development: The process of researching, productizing, and refining new or existing technologies.
1,619 questions

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.