2026
07
26
13
59
[javascript] workaround Content-Security-Policy: require-trusted-types-for 'script'
<script>
if (window.trustedTypes && window.trustedTypes.createPolicy) {
window.trustedTypes.createPolicy('default', {
createHTML: string => string,
createScriptURL: string => string,
createScript: string => string,
});
}
</script>
Content-Security-Policy: require-trusted-types-for 'script'
因為最近用AI寫html,常常遇到這個error.
需要加上上面的script繞過這個問題,
但如果想要更嚴謹是需要把string => string
要改成檢查這個string沒問題後才放行.