If you apply the CSP policy and call toatUI, an error occurs indicating that the CSP policy has been violated.

hello! Thank you for always working hard. 


In index.html 


<meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline';font-src 'self' data:; default-src 'self'; connect- If you set src 'self' http://localhost; style-src 'self' 'unsafe-inline'; "> 


and then call toastUI, the same error occurs. I don't know what to do.


error in chrome console : 

error1.png


expected cause of error : 

error2.png


my dependencies : 

package.json.png


Using toastUI like this:

error3.png


Thank you for always providing so much help. :)



2 Replies 1 reply marked as answer

MR Mallesh Ravi Chandran Syncfusion Team September 28, 2023 02:09 PM UTC

Hi , 

We have already considered the reported issue “CSP Error When Using Toast Utility with CSP Meta Tag" as a bug from our end and the fix for the issue will be included with our upcoming patch release ,which is expected to be rolled out in mid-October."

Now you can track the status of the reported issue through the feedback below,

Feedback Linkhttps://www.syncfusion.com/feedback/47116/csp-error-when-using-toast-utility-with-csp-meta-tag  

Disclaimer: “Inclusion of this solution in the weekly release may change due to other factors including but not limited to QA checks and works reprioritization.

Regards,

Mallesh


Marked as answer

MR Mallesh Ravi Chandran Syncfusion Team October 18, 2023 05:28 AM UTC

Hi ,

We have included the fix for the issue “CSP Error When Using Toast Utility with CSP Meta Tag" with our package version “23.1.40”. Therefore, we recommend upgrading to our latest version to resolve the current issue.

Release notes: https://ej2.syncfusion.com/angular/documentation/release-notes/23.1.40?type=all#toast


Regards,

Mallesh


Loader.
Up arrow icon