Getting violation of CSP ERROR on iframe loading

Question

I have this in my CSP key in web.config, frame-src 'self' blob: *.xxx.com *.xxx.com; and other things too like default-src , img-src and all but still while retrieving the image or pdf, I am getting error in console

Refused to frame 'blob:(the URL)' because it violates the following Content Security Policy directive: "frame-src *.xxx.com *.xxx.cn".

Any help would be highly appreciated.

Halvor Sakshaug · Accepted Answer · 2024-02-23 04:45:18Z

0

The frame-src directive that you give is different from the one presented in the error message. This likely means that you have multiple CSPs defined. While your content passes "frame-src 'self' blob: *.xxx.com *.xxx.com", it is blocked by "frame-src *.xxx.com *.xxx.cn". Check your response headers and meta tags for all CSPs and remove/modify your policies to serve one working header.

answered Feb 23, 2024 at 4:45

Halvor Sakshaug

3,7231 gold badge8 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Getting violation of CSP ERROR on iframe loading

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related