Content Security Policy Directive

[caseyboyd]

Refused to execute JavaScript URL because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-5310cb31-6b69-5584-26e5-3bd833131f97' chrome-extension: 'unsafe-eval' https://sfdc.azureedge.net *.na57.visual.force.com 'unsafe-eval' https://ssl.gstatic.com/accessibility/". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

Getting this error when executing "sforce.opencti.screenPop"

Any ideas?

[nikhilcloudroute]

@caseyboyd did you find any solution to this? I am still facing this issue.

[kishoreaoe]

for development purpose, i have installed CSP plugin in chrome and going forward. @caseyboyd @nikhilcloudroute hope this may helps.

As far as i know we need to write .htaccess rule and need to add these values inside it.