CSP violation using Angular Viewer when report contain graphics
Posted: Mon Aug 26, 2024 5:15 pm
Hello,
I'm using Stimulsoft Viewer for Angular, and i'm having issues when the report contains graphics due to CSP rules.
My CSP rule is a simple script-src 'self'.
Graphic not showing data:
Console Error:
When i add 'unsafe-inline', it's fine:
It's not a good practice to allow unsafe-inline in any html application. Is there a workaround or a fix to this issue?
Thanks
I'm using Stimulsoft Viewer for Angular, and i'm having issues when the report contains graphics due to CSP rules.
My CSP rule is a simple script-src 'self'.
Graphic not showing data:
- report without unsafe-inline.png (62.83 KiB) Viewed 8746 times
- csp violation.png (41.75 KiB) Viewed 8746 times
When i add 'unsafe-inline', it's fine:
- report with unsafe-inline.png (77.52 KiB) Viewed 8746 times
It's not a good practice to allow unsafe-inline in any html application. Is there a workaround or a fix to this issue?
Thanks