main.49c677484d95e163b289.bundle.js:2Refusedtoloadthescript'https://maps.googleapis.com/maps/api/js?v=quarterly&callback=agmLazyMapsAPILoader&key=xxxxxxxxxx&language=pt' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.load@main.49c677484d95e163b289.bundle.js:2Z@main.49c677484d95e163b289.bundle.js:2Z.ɵfac@main.49c677484d95e163b289.bundle.js:2si@main.49c677484d95e163b289.bundle.js:2ii@main.49c677484d95e163b289.bundle.js:2ti@main.49c677484d95e163b289.bundle.js:2Bc@main.49c677484d95e163b289.bundle.js:2pe.ɵfac@main.49c677484d95e163b289.bundle.js:2si@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2co@main.49c677484d95e163b289.bundle.js:2qc@main.49c677484d95e163b289.bundle.js:2template@14.49c677484d95e163b289.chunk.js:1ao@main.49c677484d95e163b289.bundle.js:2ro@main.49c677484d95e163b289.bundle.js:2zo@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2ro@main.49c677484d95e163b289.bundle.js:2create@main.49c677484d95e163b289.bundle.js:2createComponent@main.49c677484d95e163b289.bundle.js:2activateWith@main.49c677484d95e163b289.bundle.js:2activateRoutes@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2activateChildRoutes@main.49c677484d95e163b289.bundle.js:2activateRoutes@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2activateChildRoutes@main.49c677484d95e163b289.bundle.js:2activate@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_tryNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_tryNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2_complete@main.49c677484d95e163b289.bundle.js:2complete@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_tryNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2o@main.49c677484d95e163b289.bundle.js:2_innerSub@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2notifyNext@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2_next@main.49c677484d95e163b289.bundle.js:2next@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2_trySubscribe@main.49c677484d95e163b289.bundle.js:2subscribe@main.49c677484d95e163b289.bundle.js:2call@main.49c677484d95e163b289.bundle.js:2Promise.then(async)b@main.49c677484d95e163b289.bundle.js:2e.scheduleTask@main.49c677484d95e163b289.bundle.js:2onScheduleTask@main.49c677484d95e163b289.bundle.js:2e.scheduleTask@main.49c677484d95e163b289.bundle.js:2t.scheduleTask@main.49c677484d95e163b289.bundle.js:2t.scheduleMicroTask@main.49c677484d95e163b289.bundle.js:2I@main.49c677484d95e163b289.bundle.js:2x@main.49c677484d95e163b289.bundle.js:2(anonymous)@main.49c677484d95e163b289.bundle.js:2t@main.49c677484d95e163b289.bundle.js:2(anonymous)@14.49c677484d95e163b289.chunk.js:1Show170moreframesmain.49c677484d95e163b289.bundle.js:2ERRORError:Uncaught(inpromise):Event:{"isTrusted":true}atx(main.49c677484d95e163b289.bundle.js:2)atx(main.49c677484d95e163b289.bundle.js:2)atmain.49c677484d95e163b289.bundle.js:2ate.invokeTask(main.49c677484d95e163b289.bundle.js:2)atObject.onInvokeTask(main.49c677484d95e163b289.bundle.js:2)ate.invokeTask(main.49c677484d95e163b289.bundle.js:2)att.runTask(main.49c677484d95e163b289.bundle.js:2)aty(main.49c677484d95e163b289.bundle.js:2)att.invokeTask[asinvoke](main.49c677484d95e163b289.bundle.js:2)atu(main.49c677484d95e163b289.bundle.js:2)
No caso o projeto é com jhipster. Spring com Angular 9
L
Lucas_Camara1 like
A questão é que vc tem que montar a tag meta para o http-equiv=“Content-Security-Policy” com as configurações para permitir execução de scripts de outra origem no atributo content. Com isso é preciso entender como esse CSP funciona (conforme links que passei). Eu não manjo muito disso, tanto que os exemplos que mandei foi com base numa rápida leitura que fiz na documentação.
G
guilhermebhte
Entendi isso também. Então estou no caminho certo.
G
guilhermebhte
Mas estranho que tudo que vejo como solução não funciona.
L
Lucas_Camara
Até tentei dá uma lida melhor para tentar entender e montar, mas não entendi 100% e estou meio apertado no trampo. Qdo tiver um tempinho mais suave, vou ler a doc com mais calma.
L
Lucas_Camara
O que mais vc tentou?
G
guilhermebhte
Quase tudo de pesquisa relacionada a este assunto.
Foi tanta coisa que nem lembro mais.
Este funciona com localhost:9090, mas não com localhost:8080.
Porque está dando está diferença ?
L
Lucas_Camara
Oxi, pela porta não deveria ter diferença não. Será que pode ser algum tipo de cache?
G
guilhermebhte
Já abri em todos os navegadores. com janela anonima ou não. Mas quando faço o build no servidor, ele não funciona e dá erro de permissão. Como o exemplo da porta 8080.
L
Lucas_Camara
Como esses estilos estão sendo importados no projeto? Vou ver se consigo simular esse problema aqui.
Em termos de segurança, esse contentSecurityPolicy é para evitar ataques de Cross Site Scripting. O que vc pode tentar é, em vez de tirar essa linha, alterar com as devidas permissões. Pois estava tentando adicionar isso numa tag meta no html. Acredito que vc teria que adicionar a url https://fonts.googleapis.com nessa configuração do web security, assim:
O tipo do recurso diz se é um script, um estilo, uma fonte, etc. E esse default-src é um fallback caso não encaixe em nenhum outro declarado (li isso na documentação);
Já a diretiva, diz como será permitido ler o recurso utilizado. Como exemplo, um script carregado via eval. E ainda definir de qual host o recurso está vindo.