The number of URLs is increasing for 'CSP: script-src unsafe-inline' and 'CSP: style-src unsafe-inline' after fixing 'CSP: Wildcard Directive'

[elenastanul87]

Hello.

1. I has the next report:
   
   The value of CSP was
   "default-src 'self'; script-src 'self' cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' validator.swagger.io bootswatch.com getbootstrap.com data:; style-src 'self' cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' cdn.jsdelivr.net data:; connect-src 'self' bootswatch.com;"
2. I fixed CSP: Wildcard Directive by adding form-action 'self'; frame-ancestors 'self' and received the next report:
   
3. My question is why the number of URLs in CSP: script-src unsafe-inline and CSP: style-src unsafe-inline was increased?

[kalchoivanov15]

9209257523 649580029

[kalchoivanov15]

433208

[kalchoivanov15]

#313

[wineerteam]

Hi team,

Thanks for maintaining the OWASP community resources.
The Slack invite link appears to be expired. I would like to request access to the OWASP Slack workspace so I can participate and contribute.

Please let me know the next steps.

Best regards,
Sunil Kumar Yadav

[kalchoivanov15]

zen.com