问题
I've implement login with facebook (with javascript SDK method) in my website, it works perfectly if I disable my CSP (content security policy) but wont work if I enable it, below is my CSP code, can anyone enlighten me, what did I Miss?
default-src 'none';
connect-src 'self';
frame-src https://www.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com;
img-src 'self' https://*.facebook.com https://scontent.xx.fbcdn.net;
script-src 'self' https://code.jquery.com https://connect.facebook.net https://graph.facebook.com;
PS: I've been searching 'facebook login CSP' but no luck, please help.
来源:https://stackoverflow.com/questions/50539993/facebook-login-javascript-sdk-content-securty-policy