Welcome Guest, Not a member yet? Register   Sign In
CSP Issues with Debug Bar
#1

I have enabled CSP on one of my CI4 (latest 4.2.11) applications. I am adding allowed sources at runtime from my base controller using the approriate $this->response->CSP->{function}. I have also added nonces to all my inline scripts and styles using the csp_script_nonce() and csp_style_nonce() functions.
From my application point of view everything is working perfectly.
However, with environment set to development and the debug bar enabled I am getting lots of CSP blocking errors related to the debug bar. Whilst this isn't a problem for production where its turned off, it does make it more difficult to spot other CSP errors related to my code in my development environment as they get buried in the numerous debug bar CSP errors.
Does the debug bar function ok for anyone with CSP enabled? If so what allowance as you added to the CSP rules?
Thanks,
Luke
Reply


Messages In This Thread
CSP Issues with Debug Bar - by ltarrant - 12-30-2022, 05:49 AM
RE: CSP Issues with Debug Bar - by kenjis - 12-30-2022, 06:04 PM
RE: CSP Issues with Debug Bar - by ltarrant - 01-02-2023, 03:32 AM



Theme © iAndrew 2016 - Forum software by © MyBB