Content Security Policy Issue with FluentUI #23977

raphael10-collab · 2022-07-19T09:00:23Z

raphael10-collab
Jul 19, 2022

In an Electron-React app:

In package.json I defined devContentSecurityPolicy ( https://www.electronforge.io/config/plugins/webpack#content-security-policy ) as follows:

    "plugins": [
        [
          "@electron-forge/plugin-webpack",
          {
            "mainConfig": "./webpack.main.config.js",
            "devContentSecurityPolicy": "default-src 'none'; script-src 'self'; script-src-elem 'self'; img-src *; style-src-attr 'self' 'unsafe-inline'; font-src 'self' https://static2.sharepointonline.com; connect-src https: http:"

Output: the electron page is not rendered and got these error

"@fluentui/react": "^8.80.0"
"react": "^18.1.0"
node: v16.15.1
O.S. : Ubuntu 20.04

How to correctly define Content Security Policy for FluentUI ?

raphael10-collab · 2022-07-19T19:29:36Z

raphael10-collab
Jul 19, 2022
Author

I spent quite few hours in this hurdle...

But now in package.json :

  "plugins": [
        [
          "@electron-forge/plugin-webpack",
          {
            "mainConfig": "./webpack.main.config.js",
            "devContentSecurityPolicy": "default-src 'none'; script-src 'unsafe-eval'; script-src-elem 'self'; img-src *; style-src 'self' 'unsafe-inline'; font-src 'self' https://static2.sharepointonline.com/files/fabric/assets/icons/; connect-src 'self';",

./src/app/index.html :

<!DOCTYPE html>
<html>
  <head>
    <meta charset="UTF-8">
  </head>
  <body>
    <div id="app" style="height: 100%;" style-src="../../assets/fonts/" 'self' data:></div>
  </body>
</html>

and commented __webpack_nonce__' option in webpack.plugin.js'

it seems working fine

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Content Security Policy Issue with FluentUI #23977

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Content Security Policy Issue with FluentUI #23977

Uh oh!

Uh oh!

raphael10-collab Jul 19, 2022

Replies: 1 comment

Uh oh!

raphael10-collab Jul 19, 2022 Author

raphael10-collab
Jul 19, 2022

raphael10-collab
Jul 19, 2022
Author