Refused to execute inline script because it violates the following Content Security Policy directive

怼烎@ 2022-09-10 11:15 23阅读 0赞

--------------------

*  本文原创作者：谷哥的小弟
 *  作者博客地址：http://blog.csdn.net/lfdfhl

--------------------

# 问题描述 #

在利用表单向后台提交数据时，前端页面报错：

> Refused to execute inline script because it violates the following Content Security Policy directive: “default-src ‘self’”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-2/nwTfnmhsEOQ+pVDGpNeMyOzp4HRtQri8QvvBb+A6Q=’), or a nonce (‘nonce-…’) is required to enable inline execution. Note also that ‘script-src’ was not explicitly set, so ‘default-src’ is used as a fallback.

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_6LC35ZOl55qE5bCP5byfIGh0dHA6Ly9ibG9nLmNzZG4ubmV0L2xmZGZobA_size_32_color_FF0000_t_100]

# 解决方案 #

在前端表单提交时请勿采用`type="submit"`的方式，而应采用`type="button"`。

# 示例代码 #

在此，以示例形式展示解决方案。

## html代码 ##

## JavaScript代码 ##

//利用$.post()提交表单
    $("#ajaxPostButton4").click(function() {
        
    	var url = "http://xxx.xxx.137.1:8080/MyController/test";
    	var params = $("#userform2").serialize();
    	console.log(params);
    	$.post(
    		url,
    		params,
    		function(data) {
        
    			console.log(data);
    		},
    		"json"
    	);
    });

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_6LC35ZOl55qE5bCP5byfIGh0dHA6Ly9ibG9nLmNzZG4ubmV0L2xmZGZobA_size_32_color_FF0000_t_100]: /images/20220829/81fa1b5c24b149d98209ab3c3bf66511.png