Unrecognized Content-Security-Policy directive 'script-src:'

content-security-policy crosswalk
Kingalione picture Kingalione · Dec 18, 2015 · Viewed 13.9k times · Source

in my ionic application I've added crosswalk to get a better android performance. But if I run the application I get this error:

Unrecognized Content-Security-Policy directive 'script-src:'.

My Content-Security-Policy looks like this:

<meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' 'unsafe-inline'; script-src: 'self' 'unsafe-inline' 'unsafe-eval'">

Why is this Content-Security-Policy throwing an error?

Answer

oreoshake picture oreoshake · Dec 18, 2015

It should be:

<meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'">

The : value does not belong anywhere in a policy as a delimiter.

Related questions

Refused to load the script because it violates the following Content Security Policy directive

When I tried to deploy my app onto devices with Android system above 5.0.0 (Lollipop), I kept getting these kind of error messages: 07-03 18:39:21.621: D/SystemWebChromeClient(9132): file:///android_asset/www/index.html: Line 0 : Refused to load the script 'http://xxxxx' because …

Read More
How does Content Security Policy (CSP) work?

I'm getting a bunch of errors in the developer console: Refused to evaluate a string Refused to execute inline script because it violates the following Content Security Policy directive Refused to load the script Refused to load the stylesheet What's …

Read More
Content Security Policy: The page's settings blocked the loading of a resource

I am using CAPTCHA on page load, but it is blocking because of some security reason. I am facing this problem: Content Security Policy: The page's settings blocked the loading of a resource at http://www.google.com/recaptcha/api.…

Read More