Felipe Horta
Rank: #5654
9Views
1Comments
Content Security Policies delivered via a  element
Question
Security
Platform Version
11.9.1 (Build 20359)

After apply Content Security Policies, there is a message on browser console:

"Content Security Policies delivered via a <meta> element may not contain the report-uri directive.
Content Security Policies delivered via a <meta> element may not contain the frame-ancestors directive."


Can I apply that out of <meta> element?


Thanks

0
0
on 2020-11-19
Copy link to comment
Shweta Gedam
Rank: #295

Hi Felipe,

Please refer to the following links for the CSP directives you have mentioned, you will find some helpful information about these.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-uri

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors


It will help you hopefully, Thanks :)

2
0
on 2020-11-19
Copy link to comment