Issue relating Content Security Policy | Community
Skip to main content
jazyac
jazyac
Level 2
July 27, 2023
Solved

Issue relating Content Security Policy

  • July 27, 2023
  • 2 replies
  • 2169 views

 

I have an adobe cloud instance for my testing purpose. I control it using Adobe cloud manager. I usually test my plugin on it. Recently I have started facing a couple of issues which were non existent when I last tested (around a couple of months ago.)

 

A part of my plugin's functionality requires a redirect to my website for authentication and other purposes. I started noticing that I am now getting this error.

 

 


One of my peers is noticing something similar.

 

 

 

I have not changed anything in my plugin, and neither have I updated the adobe cloud version. I can be fairly confident that if there was any manual change in configuration introduced, I would be aware of it.

 

1. Has there been anything new introduced by adobe, which has started giving me these issues?

2. How can I address them?

3. From my research online, I have only been able to find the solution of editing the Content Security Policy in my AEM Cloud Instance. But I assume that it is not possible, since i do not have access to "/system/console/configMgr" . How can I get access to this?
Since I have Developer level access of things when I check in Adobe cloud manager admin console, I assumed I should not have any issues accessing "/system/console/configMgr" of my cloud instance.
Image

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Anudeep_Garnepudi

@jazyac 

Add Content Security Policy Headers in your dispatcher vhost file.

2 replies

Peter_Puzanovs
Community Advisor
Peter_PuzanovsCommunity Advisor
Community Advisor
July 27, 2023

Hi Jazyac,

 

You can configure your webserver to write CSP header to the browser with all the allowed domains.

 

Regards,

Peter

    jazyac
    jazyacAuthor
    Level 2
    July 27, 2023

    Thanks @peter_puzanovs  for your reply.

    I am not hosting on my own server. The instance is on adobe cloud.

     

    How can I achieve that in this scenario?

     

     

      Anudeep_Garnepudi
      Community Advisor
      Anudeep_GarnepudiCommunity AdvisorAccepted solution
      Community Advisor
      July 29, 2023

      @jazyac 

      Add Content Security Policy Headers in your dispatcher vhost file.

      AG
        Terms & ConditionsAccessibility statement

        Loading footer...