Re: apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-06 Thread Thomas Broyer
The problem is not loading the nocache.js itself, but is triggered by the setupInstallLocation function of the nocache.js, at line 71, specifically the line: $doc.body.appendChild(scriptFrame); and probably due to that line: scriptFrame.src = $intern_10; because of: $intern_10 = 'javascript:""'

apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-06 Thread paparao rambuddi
Hi Team Hope you are doing well i am using GWT version 2.8.2 i am trying to apply content secure policy in GWT using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval but i am getting below setupInstallLocation @ AllDec.nocache.js?timeStamp=1709618887261:71