This is the CSP I’m setting –
Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-eval' 'nonce-b1967a39a02f45edbac95cbb4651bd12' 'unsafe-hashes'; frame-src 'self' 'nonce-b1967a39a02f45edbac95cbb4651bd12' 'unsafe-hashes'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src 'self'; font-src 'self' data:;
and my JS file content is –
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title> WebHelp Navigation Mini-bar </title>
<style>
<!--
body {margin:0;}
-->
</style>
<script nonce='testData' src="whver.js" charset="utf-8"></script>
<script nonce='testData' src="whutils.js" charset="utf-8"></script>
<script nonce='testData' src="whmsg.js" charset="utf-8"></script>
<script nonce='testData' src="whproxy.js" charset="utf-8"></script>
<script nonce='testData' src="whmozemu.js" charset="utf-8"></script>
<script nonce='testData' src="whtbar.js" charset="utf-8"></script>
</head>
<body marginheight="0" marginwidth="0" bgcolor="#363f48" background="background.png" scroll="no">
<script nonce='testData' language="javascript1.2">
<!--
if (window.gbWhTBar)
{
setButtonFont("avprev","Arial","11pt","#a7abaf","Normal","Normal","none");
setButtonFont("avnext","Arial","11pt","#a7abaf","Normal","Normal","none");
setButtonFont("rolesel","Arial","11pt","#a7abaf","Normal","Normal","none");
setButtonFont("synctoc","Arial","11pt","#a7abaf","Normal","Normal","none");
setButtonFont("hide2","Arial","11pt","#a7abaf","Normal","Normal","none");
gsIPrev = "wht_prev.gif";
gsIPrevD = "wht_prev_g.gif";
gsINext = "wht_next.gif";
gsINextD = "wht_next_g.gif";
gsISync = "wht_sync.gif";
gsIHide = "wht_hide.gif";
setBackgroundcolor("#363f48");
setBackground("background.png");
addButton("avprev",BTN_TEXT|BTN_IMG,"","","","","",0,0,"previous-enabled.png","","","previous-disabled.png","","");
addButton("avnext",BTN_TEXT|BTN_IMG,"","","","","",0,0,"next-enabled.png","","","next-disabled.png","","");
addButton("rolesel",BTN_TEXT|BTN_IMG,"","","","","",0,0,"","","","","","");
addButton("synctoc",BTN_TEXT|BTN_IMG,"","","","","",0,0,"sync-toc.png","","","sync-toc.png","","");
addButton("hide2",BTN_TEXT|BTN_IMG,"","","","","",0,0,"hide.png","","","hide.png","","");
addButton("blankblock");
writeStyle(true);
ReSortMinibarButtons();
}
else
document.location.reload();
if (window.gbNav6)
{
var oMsg=new whMessage(WH_MSG_RELOADNS6,null,null);
notify(oMsg);
}
//-->
</script>
</body>
</html>
After removing ‘unsafe-inline’ from script-src and adding ‘nonce-b1967a39a02f45edbac95cbb4651bd12’ I’m getting this error. Kind of stuck for a long in this issue. Need some guidance. Thanks in advance.