search

developerforce / open-cti-demo-adapter

Other
91 stars 95 forks source link

Content Security Policy Directive #24

Open caseyboyd opened 5 years ago

caseyboyd commented 5 years ago

Refused to execute JavaScript URL because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-5310cb31-6b69-5584-26e5-3bd833131f97' chrome-extension: 'unsafe-eval' https://sfdc.azureedge.net *.na57.visual.force.com 'unsafe-eval' https://ssl.gstatic.com/accessibility/". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

Getting this error when executing "sforce.opencti.screenPop"

Any ideas?

nikhilcloudroute commented 5 years ago

@caseyboyd did you find any solution to this? I am still facing this issue.

kishoreaoe commented 1 year ago

for development purpose, i have installed CSP plugin in chrome and going forward. @caseyboyd @nikhilcloudroute hope this may helps.

As far as i know we need to write .htaccess rule and need to add these values inside it.