Add url in Content security policy

Viewed 90

I added CSP to my project. I call to a external url: http://xx.xx.xx:3002/socket.io

response.addHeader(HEADER_NAME, "default-src 'self' 'unsafe-inline' 'unsafe-eval'; */socket 'self' 'unsafe-inline' 'unsafe-eval'")

But in my browers, I'm getting error:

/socket.io/?EIO=3&transport=polling&t=NNrFFxf

Content security policy: The options for this page have blocked the loading of a resource 
at https://xx.xx.xx.xx:3002/socket.io/?EIO=3&transport=polling&t=NNrFz_O (default-src).

Content security policy: Unable to process unknown directive '* / socket'

Any suggestion?

0 Answers
Related