Not able to apply Content Security Policy on Qliksense Enterprise version

[_rohitgharat]

Hi,

We are trying to apply Content security policy on Qliksense Enterprise version for our headers:

QMC>>Virtual Proxies>>Advanced>> Additional Response headers

We tried all the below syntax for Content security policy:

Content-Security-Policy: default-src 'self'; img-src *;

Content-Security-Policy:
default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';base-uri 'self';form-action 'self'

 But when we apply the above syntax for CSP, Qliksense login page doesn't load properly and the subsequent pages for dashboards turns blank.

Kindly suggest how can we implement CSP in Qliksense Enterprise version?.

 

Thanks in Advance.

Regards,

Rohit Gharat

[David_Friend · Accepted solution]

@_rohitgharat did you already review this KB: https://community.qlik.com/t5/Official-Support-Articles/How-to-determine-string-policy-for-Content-S...