Welcome Guest, Not a member yet? Register   Sign In
need help with CSP config
#1

I activate csp setting to 'true' at Config\App.
But web browser console show error something like : 'csp setting blocked content at 'self''
I don't know how to set Config\CSPsetting properly so my page not show error, but enforce good security practice.

Need help with that. The setting only have default, no choice on documentation line
Reply
#2

In Config/ContentSecurityPolicy.php you need to set the attributes to whatever you're doing.

See:
http://www.html5rocks.com/en/tutorials/s...ty-policy/
http://www.w3.org/TR/CSP/
Simpler is always better
Reply
#3

Great!!, thanks...
Now I can properly set CSP setting.
Reply




Theme © iAndrew 2016 - Forum software by © MyBB