playframework 2.6 refused to apply inline style because it violates the following Content Security

playframework 2.6 refused to apply inline style because it violates the following Content Security

今天在做文件上传的时候，出现了下面的错误：

Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-4Su6mBWzEIFnH4pAGMOuaeBrstwJN4Z3pq/s1Kn4/KQ='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.

伤透了脑筋，就是图片上传上去了，返回url的时候被拦截了，这是play里面的拦截引起的。

解决方法

在application.conf的headers里面加上这句：

# The Content-Security-Policy header. If null, the header is not set. contentSecurityPolicy = "default-src 'self' 'unsafe-inline'"

参考文献

[1]. Refused to apply inline style because it violates the following Content Security Policy directive. ​​https://stackoverflow.com/questions/17766817/refused-to-apply-inline-style-because-it-violates-the-following-content-security​​

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。