SecurID prompt does not appear using Chrome and Firefox after adding a Security Policy on RSA Agent 8.0.3 for Apache web server
Originally Published: 2020-10-16
Last Modified: 2023-10-06
Article Number
Applies To
RSA Product/Service Type: Authentication Agent for Web
RSA Version/Condition: 8.0.1 for Apache Web Server
Platform: Linux
O/S Version: Red Hat Linux 7.3
Issue
Header always set Content-Security-Policy "script-src 'self'; object-src 'self'" and user launches the Token Authentication page in Chrome or Mozilla, the page is blank with below error reported in the browser:
Refused to evaluate a string as JavaScript because 'unsafe-inline' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'". and relaxing the unsafe-inline policy as below able to go to the authentication page,
Header always set Content-Security-Policy "script-src 'self' 'unsafe-inline'; object-src 'self'"
but after entering the token credentials and submit, again error occurs stating to allow unsafe-eval,. Below is the error in console:
Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline'".
Cause
Resolution
Related Articles
Workflow REST Web Service node returns "RSA002 : Invalid Configuration" message in RSA Identity Governance & Lifecycle Number of Views Source variable and target variable are showing duplicate values when adding a new value on Next Value node in RSA Via Lif… Number of Views Risk-Based Authentication Data Flow Number of Views No SQL Strategy found for SQL statement: Execute CreateAccount when using a Generic Database AFX connector in RSA Identity… Number of Views Duplicate User Groups Number of Views
Trending Articles
Don't see what you're looking for?
