Content Security Policy (CSP)

[hoang1998lqd]

I am having trouble configuring Content Security Policy (CSP) at the gateway when not using 'unsafe-eval' 'unsafe-inline' in the configuration.

Using jhipster version 6.10.5, Node version 16.17.0

[mraible]

Can you please explain your issue in more detail? It's really hard to fix a bug if we can't reproduce it.

[hoang1998lqd]

When I configure the content security section as shown in the image, an error appears in Angular as shown below.

[OmarHawk]

You are on a super old version. In more recent versions, the amount of issues regarding such CSPs (without unsafe-inline) dropped severely, so I do suggest upgrading your application first to the latest version.

[mshima]

JHipster 6 is too old. You should upgrade.