CODEWITHSUNDEEP
javascriptasp.netwebxsscontent-security-policy
Albert Torres
Albert Torres

Reputation: 173

Prevent inline JavaScript on Internet Explorer 11 using Content Security Policy

Is it possible prevent inline JavaScript on Internet Explorer 11 using CSP on ASP.NET WebForm? I know IE 11 does not support Content Security Policy Level 2 but it seen that support Level 1.0. I tried many way and there is not a clear answer out there. I tried:

it's not working.

Thanks! Albert Torres

Upvotes: 2

Views: 3860

Answers (1)

SilverlightFox
SilverlightFox

Reputation: 33538

See here - IE 11 only has partial support.

Partial support in Internet Explorer 10-11 refers to the browser only supporting the sandbox directive by using the X-Content-Security-Policy header

However, you could try this sandbox directive. Description here:

Enables a sandbox for the requested resource similar to the iframe sandbox attribute. The sandbox applies a same origin policy, prevents popups, plugins and script execution is blocked. You can keep the sandbox value empty to keep all restrictions in place

e.g.

X-Content-Security-Policy: sandbox

Upvotes: 1

Related Questions