Content Security Policy Issues for Chrome and FireFox

[Robin Knight]

We are using PDF View to render the Synfusion Word DOCIO reports .  It works locally but when we deploy the application on our dev servers, we get Content Security Policy Issues for Chrome and Fire Fox.

We downloaded the Script and CSS files from the below package :

https://www.nuget.org/packages/Syncfusion.EJ2.JavaScript/   

However if you see material.css, it is refering . 

url("https://fonts.googleapis.com/css?family=Roboto:400,500")

We do not want to refer fonts.googleapis.com/css.. This website refers other website

https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');

We tried  referring the Content Security Policy in web.config but that also did not work

Please advice.

[Mohan Selvaraj]

Hi Robin, 

 

If you wants all the css and fonts in local, please avoid using individual component styles (which will have online roboto font reference). Instead you can use the material.css style file from ej2-material-theme package in the following location ( which does not have reference to online roboto font and contains styles of all the components).  

 

   

 

Using this, we have also created a sample for your reference.  

Sample: https://www.syncfusion.com/downloads/support/forum/150383/ze/roboto-sample-app887085834   

 

Steps for running the sample,   

1.           Install npm packages (ej2-material-theme for material.css) using following command “npm install”  

2.           Once the installation is complete, open the index.html file in browser.  

 

Please let us know, if you have any concerns. 

 

 

Regards, 

Mohan S 

[Robin Knight]

Hi Robin, 

 

If you wants all the css and fonts in local, please avoid using individual component styles (which will have online roboto font reference). Instead you can use the material.css style file from ej2-material-theme package in the following location ( which does not have reference to online roboto font and contains styles of all the components).  

 

   

 

Using this, we have also created a sample for your reference.  

Sample: https://www.syncfusion.com/downloads/support/forum/150383/ze/roboto-sample-app887085834   

 

Steps for running the sample,   

1.           Install npm packages (ej2-material-theme for material.css) using following command “npm install”  

2.           Once the installation is complete, open the index.html file in browser.  

 

Please let us know, if you have any concerns. 

 

 

Regards, 

Mohan S 

Hi Mohan ,

Thank you for responding back. We do not have admin permission to run npm install for ej2-material-theme for material.css.

Please  send us the local material.css which do not have reference to online roboto font and style  in the same way you have send us sample projects

Thanks 

[Akshaya Arivoli]

Hi Robin, 

We have shared the local material.css file which do not have reference to online roboto font and style in the below link, 

https://www.syncfusion.com/downloads/support/directtrac/general/ze/customized-1472016848  

Please try this and let us know if you have any concerns on this. 

Regards, 

Akshaya