CSP violation using Angular Viewer when report contain graphics

[victorscapin]

Hello,

I'm using Stimulsoft Viewer for Angular, and i'm having issues when the report contains graphics due to CSP rules.
My CSP rule is a simple script-src 'self'.

Graphic not showing data:

report without unsafe-inline.png (62.83 KiB) Viewed 1063 times

Console Error:

csp violation.png (41.75 KiB) Viewed 1063 times

When i add 'unsafe-inline', it's fine:

report with unsafe-inline.png (77.52 KiB) Viewed 1063 times

It's not a good practice to allow unsafe-inline in any html application. Is there a workaround or a fix to this issue?

Thanks

[Vadim]

Hello

From version 2024.4.1 you can use 'nonce-stichartanimation' to allow chart animation script

[victorscapin]

Hi Vadim

I will try that on next release. Thanks

[Lech Kulikowski]

Hello,

You are welcome.