SecurID prompt does not appear using Chrome and Firefox after adding a Security Policy on RSA Agent 8.0.3 for Apache web server
Originally Published: 2020-10-16
Article Number
Applies To
RSA Product/Service Type: Authentication Agent for Web
RSA Version/Condition: 8.0.1 for Apache Web Server
Platform: Linux
O/S Version: Red Hat Linux 7.3
Issue
Header always set Content-Security-Policy "script-src 'self'; object-src 'self'" and user launches the Token Authentication page in Chrome or Mozilla, the page is blank with below error reported in the browser:
Refused to evaluate a string as JavaScript because 'unsafe-inline' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'". and relaxing the unsafe-inline policy as below able to go to the authentication page,
Header always set Content-Security-Policy "script-src 'self' 'unsafe-inline'; object-src 'self'"
but after entering the token credentials and submit, again error occurs stating to allow unsafe-eval,. Below is the error in console:
Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline'".
Cause
Resolution
Related Articles
Content-Type header parameter is required for Web Service in RSA Identity Governance & Lifecycle Number of Views The RADIUS attribute called "Juniper-Junosspace-Profile" does not appear in the drop-down Attribute selection Number of Views In Rest Web Service Node, the Response Variables does not appear to accept Integer or Boolean values in RSA Governance & L… Number of Views RSA Authentication Agent 7.3.2 for Microsoft Windows SecurID passcode prompt does not appear if the lockout is automatic Number of Views RSA SecurID prompt does not appear when connecting with Remote Desktop Protocol RDP on Microsoft Windows Server 2019 with … Number of Views
Trending Articles
How to generate a PASSCODE for manual entry on a Ericsson R380 WAP phone Authentication Manager Supported Hardware and Upgrade Paths RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.8 Setup and Configuration Guide Downloading RSA Authentication Manager license files or RSA Software token seed records
Don't see what you're looking for?
