I have a header Content-Security-Policyon my site that is accessible via HTTP with a value of
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com
and it works well, with the exception of the Safari browser for Mac, which refuses to download scripts from http://googlesyndication.com via the HTTPS protocol
How can I make CSP for Safari?
source
share