Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Content Security Policy (CSP) with Jetty configuration

Andreas KuchlerJul 26 2023

Hi all,

we are currently setting up a new APEX environment with an apache in front (for authentication) and jetty on database server.

Apache Version Apache2.4(2.4.55w-r01)

APEX Version: 22.1

DB Version: 19c (Patchset. 19.15)

ORDS: 23.1.1.r1091003

The APEX Login Page is coming up fine - But the login button is not working.

In the Browser Console we found following hint:

The Content Security Policy (CSP) prevents cross-site scripting attacks by blocking inline execution of scripts and style sheets.

To solve this, move all inline scripts (e.g. onclick=[JS code]) and styles into external files.

Do someone know what's behind this and how to solve it?

regards

andreas

Comments
Post Details
Added on Jul 26 2023
7 comments
937 views