Re: apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-07 Thread paparao rambuddi
Thank for your reply, i have migrated to 2.8.2 but now i am facing new issues 1. No RPC is call happened Ex: i existing Databasecall to load the data , save data ..etc but after we apply CSP (without unsafe-inline and unsafe-eval) those are not working 2. Existing validations are not triggered

Re: apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-07 Thread paparao rambuddi
Thank for your reply, i have migrated to 2.8.2 but now i am facing new issues 1. No RPC is call happened Ex: i existing Databasecall to load the data , save data ..etc but after we apply CSP (with unsafe-inline and unsafe-eval) those are not working 2. Existing validations are not triggered

Re: apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-06 Thread Thomas Broyer
The problem is not loading the nocache.js itself, but is triggered by the setupInstallLocation function of the nocache.js, at line 71, specifically the line: $doc.body.appendChild(scriptFrame); and probably due to that line: scriptFrame.src = $intern_10; because of: $intern_10 = 'javascript:""'

apply content secure policy using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval

2024-03-06 Thread paparao rambuddi
Hi Team Hope you are doing well i am using GWT version 2.8.2 i am trying to apply content secure policy in GWT using script-src 'self' and object-src 'self' without unsafe-inline and unsafe-eval but i am getting below setupInstallLocation @ AllDec.nocache.js?timeStamp=1709618887261:71