What Is The Correct Setting For The Content-Security-Policy Header For An ADF Application
Last updated on FEBRUARY 09, 2017
Applies to:Oracle JDeveloper - Version 22.214.171.124.0 and later
Information in this document applies to any platform.
ADF application doesn't run when using filter with Content-Security-Policy header set to "default-src 'self'" directive.
Chrome developer tools console shows the following error message:
Changing Content-Security-Policy to "default-src 'self' 'unsafe-inline' 'unsafe-eval'" allows the application to run correctly.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms