请求报错blocked:csp

Mr__proto__

于 2024-03-27 10:47:28 发布

阅读量735

点赞数 2

文章标签： chrome 前端

本文链接：https://blog.csdn.net/Mr__proto__/article/details/137070239

版权

报错如下:

Refused to connect to 'http://localhost:3000/api/login' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

项目架构:electorn+react+axios

此报错是因为mate标签里写了如下代码

代码用途是,防止跨域脚本攻击

<meta
      http-equiv="Content-Security-Policy"
      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
    />

mdn文档:Content Security Policy (CSP) - HTTP | MDN

解决办法就是先把这段代码注释掉