cordova错误之： Refused to connect to XXX -- because it violates the following Content Security Policy..

小灰灰 2021-09-18 21:48 400阅读 0赞

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzM0MzE0NA_size_16_color_FFFFFF_t_70][]Refused to connect to 'http://localhost:8545/' because it violates the following Content Security Policy directive: "default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

(anonymous) @ chunk-vendors.8e02e518.js:33  
app.f97599e1.js:1 Error during service worker registration: DOMException  
error @ app.f97599e1.js:1  
2chunk-vendors.8e02e518.js:33 Uncaught (in promise) Error: invalid response - 0  
    at XMLHttpRequest.a.onreadystatechange (chunk-vendors.8e02e518.js:33)

###    **解决办法：** ###

**错误提示中，已经说是违反了Content Security Policy指令，**

因为在Content Security Policy中，没有配置对应的部分，那么会默认使用default-src指令，而default-src指令中没有设置我们发送请求url设置，因此拒绝访问。

**如果要设置允许请求数据的话，则需要设置Content-Security-Policy的connect-src \*，意思是可以请求到任何的url**，如下所示：

**只要是配置了connect-src指令，则不会使用默认指令default-src。**

解决办法参考链接：[https://blog.csdn.net/michael\_ouyang/article/details/50757456][https_blog.csdn.net_michael_ouyang_article_details_50757456]

meta标签官网：[https://developer.mozilla.org/zh-CN/docs/Web/HTML/Element/meta][https_developer.mozilla.org_zh-CN_docs_Web_HTML_Element_meta]

Content Security Policy官网：[https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Headers/Content-Security-Policy\_\_by\_cnvoid][https_developer.mozilla.org_zh-CN_docs_Web_HTTP_Headers_Content-Security-Policy_by_cnvoid]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzM0MzE0NA_size_16_color_FFFFFF_t_70]: /images/20210812/740390d66e914b4ea8b083932bd1935c.png
[https_blog.csdn.net_michael_ouyang_article_details_50757456]: https://blog.csdn.net/michael_ouyang/article/details/50757456
[https_developer.mozilla.org_zh-CN_docs_Web_HTML_Element_meta]: https://developer.mozilla.org/zh-CN/docs/Web/HTML/Element/meta
[https_developer.mozilla.org_zh-CN_docs_Web_HTTP_Headers_Content-Security-Policy_by_cnvoid]: https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Headers/Content-Security-Policy__by_cnvoid