Bootstrap blocked by csp

SonarQube Plugin Development
1

Hi, currently im using sonarqube CE v9.9 LTS. I got an issue when im using dependency-check sonarqube plugin v3.1.0 and import the dependency check report using html path.

The report already imported (the report using inline bootstrap as a styling) and it blocked by CSP (the content already there, but it cant load the bootstrap styling). How to disable CSP (content securtiy policy) in sonar LTS v9.9?
note : this issue not found in sonar v8.9

7

Hi @mzunanalfikri,

How to disable CSP (content securtiy policy) in sonar LTS v9.9?

You can’t, sorry! Safety first :point_up:

But, you could move forward by directly inlining your styles and libraries into the generated file ${WORKSPACE}/dependency-check-report.html (instead of downloading them)

Cheers,

9

Yup, I understand. In the end, I can modify the CSP using the reverse proxy, in my case nginx.