拒绝加载图像&#39；Blob：.，因为它违反了以下内容安全策略 [英] Refused to load the image 'blob:...' because it violates the following Content Security Policy

问题描述

我收到此错误：

Refused to load the image 'blob:file:///cf368042-bf23-42b6-b07c-54189d3b0e01' because it violates the following Content Security Policy directive: "default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.

尝试加载mapboxGL地图时。 这是我的CSP标签：

<meta http-equiv="Content-Security-Policy" 
    content="
      worker-src blob:; 
      child-src blob: gap:;
      default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:">

推荐答案

这是针对映像和base64的修复程序。

需要添加img-src 'self' blob: data:;如下：

<meta http-equiv="Content-Security-Policy" 
    content="
      worker-src blob:; 
      child-src blob: gap:;
      img-src 'self' blob: data:;
      default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:">

这篇关于拒绝加载图像&#39；Blob：.，因为它违反了以下内容安全策略的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！