web application – HTTP header "Content-Security-Policy" with "default-src & # 39; self-script-src & # 39; self & # 39; not blocking the unspecified domain download

Some of your past responses have not been well received and you may be stuck.

Please pay close attention to the following tips:

  • Please make sure to respond to the question. Provide details and share your research!

But to avoid

  • Ask for help, clarification, or answer other answers.
  • Make statements based on opinions; save them with references or personal experience.

To learn more, read our tips for writing good answers.