开发chrome插件报错:Refused to execute inline event handler because it violates the following Content Security Policy directive


Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self' blob: filesystem:". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

原因是 Chrome 插件不支持在插件的 html 上写内联 js, 如果需要添加事件,可以再外联 js 中写入:

错误的写法:

<div class="switch-box">
   <input class="switch-input" onchange="beautyUI()" type="checkbox" />
</div>

正确的写法

<div class="switch-box">
   <input class="switch-input" value="beautyUI" type="checkbox" />
</div>
$(function () {
  $('.switch-input').change(function () {
    var value = $(this).val()
    if (value === 'beautyUI') {
      beautyUI()
    }
  })
})


免责声明!

本站转载的文章为个人学习借鉴使用,本站对版权不负任何法律责任。如果侵犯了您的隐私权益,请联系本站邮箱yoyou2525@163.com删除。



猜您在找 vscode electron error (Refused to execute inline event handler because it violates the following Content Security Policy directive ... 和 Uncaught ReferenceError: process is not defined) Electron中Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Chrome插件在页面上直接绑定JavaScript事件提示Refused to execute inline event handler because it violates the following Co 解决 Jenkins 中无法展示 HTML 样式的问题,csp问题,Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self'". Electron中提示:Refused to execute inline event handler because it violates iframe because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' Refused to load the script xxxxxx because it violates the following Content Security Policy directive:"script-src 'self' xxxxxxxxxxxxx" 浏览器安全问题 because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.错误应该怎么解决? Refused to display because an ancestor violates the following Content Security问题简单解决 because it violates the following Content Security Policy directive: "default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'". Note that 'script-src' was not explicitly set, so 'default-s
 
粤ICP备18138465号  © 2018-2025 CODEPRJ.COM