不允许使用Angular6手动基于URL的地址栏导航

时间:2018-08-21 09:59:26

标签: angular security navigation

我已将Angular应用程序从版本5迁移到6.1.1和Webpack 4。 通常,我设法使应用程序再次运行,但只能通过访问localhost:3000网址来访问它。

我的意思是,我不能直接进入任何其他网址,因为我会得到:

Refused to load the font 'data:application/font-woff;base64,d09GRgABAAAAAJPsABIAAAABOnAAAQAAAACRvAAAAjAAAAarAAAAAAAAAABHREVGAACH3AAAAB8AAAAgAZkABUdQT1MAAIf8AAAJYgAAIEoSJsZLR1NVQgAAkWAAAABaAAAAgOq9Lj5PUy8yAAACDAAAAE4AAABgW/hYh2NtYXAAABMoAAAChQAAA66C/ZF+Y3Z0IAAAF7gAAABOAAAATgQWCyNmcGdtAAAVsAAAAQIAAAFzBlmcN2dhc3AAAIfQAAAADAAAAAwADgAOZ2x5ZgAAGuQAAGObAADUaN4bMjBoZG14AAAFUAAADdcAAB+otSCvTGhlYWQAAAGUAAAANAAAADb+7d+UaGhlYQAAAcgAAAAhAAAAJAgKBL1obXR4AAACXAAAAvEAAAWMbaNf4WxvY2EAABgIAAAC2gAAAtoqVPTibWF4cAAAAewAAAAgAAAAIAOPBQxuYW1lAAB+gAAABLgAA...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' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.

当我进入localhost:3000时,它会将我重定向到登录名/其他任何页面,并且可以通过触摸按钮左右进行导航,但是我自己无法输入网址到地址栏。

我试图通过以下方式将CSP降低到最低水平:

<meta http-equiv="Content-Security-Policy" content="default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;">

我在index.html的标题部分中。

那么我应该怎么做才能以新的角度自由浏览应用程序的网址?

0 个答案:

没有答案