This repository was archived by the owner on Jul 27, 2024. It is now read-only.
script not working when the website set Content-Security-Policy in http response. #99
Description
What is the problem?
script not working when the website set Content-Security-Policy in http response.
How to reproduce it?
- e.g. the website mp.wexin.qq.com
What is the expected result?
script work
What is the actual result?
script not work.
it make console error like this:
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' http://.qq.com https://.qq.com http://.weishi.com https://.weishi.com 'nonce-356257451'". Note that 'unsafe-inline' is ignored if either a hash or nonce value is present in the source list.
Environment
- Browser:Maxthon
- Browser version:5.2.3.3000
- Violentmonkey version:2.8.4
- OS:win10