内容安全策略错误,但元标记包含 URL
content security policy error, but meta-tag includes URL
为什么我会收到这样的错误?
Refused to load the script 'http://maps.googleapis.com/maps/api/js?v=3&sensor=false'
because it violates the following Content Security Policy directive:
"script-src 'self' *.googleapis.com 'unsafe-inline' 'unsafe-eval'".
我的元标记:
<meta http-equiv="Content-Security-Policy"
content="default-src *; style-src 'self' *.googleapis.com 'unsafe-inline'; script-src 'self' *.googleapis.com 'unsafe-inline' 'unsafe-eval'">
看来我需要明确的 URI 方案。这项工作:
<meta http-equiv="Content-Security-Policy"
content="default-src *;
script-src 'self' 'unsafe-inline' 'unsafe-eval'
127.0.0.1:*
http://*.gstatic.com
http://*.googleapis.com
https://*.gstatic.com
https://*.googleapis.com
;
style-src 'self' 'unsafe-inline'
127.0.0.1:*
http://*.gstatic.com
http://*.googleapis.com
https://*.gstatic.com
https://*.googleapis.com
">
为什么我会收到这样的错误?
Refused to load the script 'http://maps.googleapis.com/maps/api/js?v=3&sensor=false'
because it violates the following Content Security Policy directive:
"script-src 'self' *.googleapis.com 'unsafe-inline' 'unsafe-eval'".
我的元标记:
<meta http-equiv="Content-Security-Policy"
content="default-src *; style-src 'self' *.googleapis.com 'unsafe-inline'; script-src 'self' *.googleapis.com 'unsafe-inline' 'unsafe-eval'">
看来我需要明确的 URI 方案。这项工作:
<meta http-equiv="Content-Security-Policy"
content="default-src *;
script-src 'self' 'unsafe-inline' 'unsafe-eval'
127.0.0.1:*
http://*.gstatic.com
http://*.googleapis.com
https://*.gstatic.com
https://*.googleapis.com
;
style-src 'self' 'unsafe-inline'
127.0.0.1:*
http://*.gstatic.com
http://*.googleapis.com
https://*.gstatic.com
https://*.googleapis.com
">