Refused to execute inline event handler because...

[MikaelNazarenko]

Hi, dear Aimeos!

At some point ckeditor stopped to work, especially when click on 'Source' button and other buttons..

The error in console looks like this:

Code: Select all

Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

Do you know good solution for this ?

Thanks a lot !

[cyberdev]

Read about CSP, aimeos explain as well in laravel setup doc...https://aimeos.org/docs/latest/laravel/setup/
and basic article..
https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP