Steps to reproduce
- Set the CSP for the site to default-src ‘self’
script-src ‘self’ 'unsafe-inline’;
- View page and see the message in the console.
Edge should process and enforce the whole CSP, or complain that the CSP is invalid.
Dev Channel specific:
Comments and activity
- Microsoft Edge Team
Changed Assigned To to “Kamen M.”
Changed Assigned To to “wwatri”
Changed Assigned To from “wwatri” to “Liang Z.”
Changed Status to “Confirmed”
Changed Assigned To to “Ivan P.”
Changed Assigned To from “Ivan P.” to “Matthew C.”
Changed Assigned To from “Matthew C.” to “IE S.”
Changed Status from “Confirmed” to “External”
Changed Assigned To from “IE S.” to “Steven K.”
We were not able to repro this issue in the latest Edge releases. Please try to repro this issue in a current version and let us know if you experience the same issue.
Your feedback is extremely helpful as it helps us to improve the quality of Microsoft Edge. We continue to welcome more feedback and look forward to hearing from you again soon.
The MS Edge Team