'how can i implement Content security policy in angular 13
I implemented csp meta tag header in index.html in angular:
<meta
http-equiv="Content-Security-Policy: default-src 'self' https://wbid-webapp.firebaseapp.com\*"
content="default-src 'self' https://wbid-webapp.firebaseapp.com\*;
img-src \* 'self'
data: https:;
script-src 'self' https://cdn.jsdelivr.net/mark.js/8.8.3/mark.min.js
https://cdnjs.cloudflare.com/ajax/libs/mark.js/8.11.1/jquery.mark.es6.min.js
https://code.jquery.com/jquery-3.3.1.min.js
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
'unsafe-inline'
'unsafe-eval' \*;
style-src 'self' 'unsafe-inline' \*"
>
This is the meta tag I implemented and hosted. The problem is after implementation I check the URL in the google csp evaluator they are showing a "No CSP headers found for this domain!" alert, so what are the details I need to give in this link and how to give this policy and make it secure?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
