Topic: MDB including older versions of chart.js causing security issues

Zachary Bell priority asked 8 months ago


Expected behavior No errors

Actual behavior Seeing the following errors in browser console

chart.js:10868 Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.

initialize @ chart.js:10868 7.10 @ chart.js:1730 o @ chart.js:10 t @ chart.js:10 (anonymous) @ chart.js:10 (anonymous) @ chart.js:10 (anonymous) @ chart.js:10 (anonymous) @ mdb.min.js:39 n @ bootstrap:19 (anonymous) @ index-free.js:1 n @ bootstrap:19 (anonymous) @ mdb.min.js:25 n @ bootstrap:19 (anonymous) @ bootstrap:83 (anonymous) @ mdb.min.js:25

Resources (screenshots, code snippets etc.)


Arkadiusz Idzikowski staff commented 8 months ago

Could you please provide more details about the MDB Angular and Chart.js versions that you use and the reproduction steps that will help us recreate this error on our end?


Zachary Bell priority commented 7 months ago

MDB Angular 4 chart.js 3.9.1 There is no special steps for reproducing this error. Looks like MDB is pulling in older versions of chart.js which is causing this issue.


Filip Kapusta premium commented 7 months ago

As of now, we don't support 3.9.1 charts in MDB4. The latest version is supported with MDB5 only.

We've reached out to you via the email address assigned to your account to make sure that you have access to MDB5.

I see that you should have access to MDB5 PRO according to your orders, but I don't see the badge on the support next to your account.


FREE CONSULTATION

Hire our experts to build a dedicated project. We'll analyze your business requirements, for free.

Status

Closed

Specification of the issue

  • ForumUser: Priority
  • Premium support: Yes
  • Technology: MDB Angular
  • MDB Version: MDB5 5.0.0
  • Device: PC
  • Browser: all browsers
  • OS: Windows/Mac
  • Provided sample code: No
  • Provided link: No