javascript - Refused to load the font 'data:font/woff.....'it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' -


my react webapp give error on browser console

refused load font 'data:font/woff;base64,d09........' because it violates following content security policy directive: "default-src 'self'". note 'font-src' not explicitly set, 'default-src' used fallback.

also: refused connect 'ws://localhost:3000/sockjs-node/782/oawzy1fx/websocket' because violates following content security policy directive: "default-src 'self'". note 'connect-src' not explicitly set, 'default-src' used fallback.

screenshot of browser console enter image description here index.html have meta:

<meta http-equiv="content-security-policy" content="img-src 'self' data:; default-src 'self' http://121.0.0:3000/">;

webpack.cofig.js

var debug = process.env.node_env !== "production"; var webpack = require('webpack'); var path = require('path');  module.exports = {     context: path.join(__dirname, "./src"),     devtool: debug ? "inline-sourcemap" : true,     entry: "../src/index.js",      module: {         rules: [             {                 test: /\.(jpe?g|png|gif|svg|woff|woff2|eot|ttf)$/i,  // regular expression catches .js files                 exclude: /node_modules/,                 loader: 'url-loader',             },             {                 test: /\.(js|.jsx)$/,                 exclude: /(node_modules|bower_components)/,                 loader: 'babel-loader',                 query: {                     presets: ['react','es2016', 'stage-0',],                     plugins: ['react-html-attrs', 'transform-decorators-legacy', 'transform-class-properties'],                 }             },             {                 test: /\.css$/,                 use: [                     "style-loader",                     {                         loader: "css-loader",                     }                 ]             }         ]     },     resolve: {         modules: [             path.join(__dirname, "src"),             "node_modules",         ]     },     output: {         path: __dirname + "/public/",         // publicpath: "/public/",         filename: "build.js"     },     plugins: debug ? [] : [         new webpack.optimize.dedupeplugin(),         new webpack.optimize.occurrenceorderplugin(),         new webpack.optimize.uglifyjsplugin({ mangle: false, sourcemap: false }),     ],     devserver: {         port: 3000, // common port         contentbase: './public',         inline: true,         historyapifallback: true,     } };

csp helps whitelisting sources trust. other sources not allowed access to. read this q&a carefully, , make sure whitelist fonts, socket connections , other sources if trust them.

if know doing, can comment out meta tag test, works. realise / user being protected here, keeping meta tag thing.


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more