Progress® Telerik® UI for Blazor Feedback Portal
Back to Feed
Request a Feature Report a Bug
Unplanned
Last Updated: 24 Jun 2024 11:22 by ADMIN
Craig
Created on: 17 Jun 2024 22:06
Category: Spreadsheet
Type: Feature Request
9
Make the Spreadsheet compliant with strict Content Security Policy (CSP)
I MUST use Strict CSP with Telerik.UI for Blazor. Please provide a path forward for me to be able to use versions 6+. Maybe offer a reduced distro without the Spreadsheet component?
Duplicated Items
2 comments
ADMIN
Dimo
Posted on: 24 Jun 2024 11:22

Hello Craig,

CSP compliance for the Spreadsheet component is a big and complex task that will require considerable changes to our JavaScript code. This is due to the nature of the Spreadsheet and how we use function evaluation now.

We have started working on this initiative recently, but there is no specific time frame for a release yet. It will surely take months and the changes may take effect in 2025. All this is preliminary unofficial information.

In the meantime, if strict CSP compliance is an absolute must, then the remaining option is to download our source code and rebuild the telerik-blazor.js file without the Spreadsheet scripts. You will need to perform this procedure after every component version update.

    On a side note, I edited the title of this feature request to be more specific.

    Regards,
    Dimo
    Progress Telerik

    Stay tuned by visiting our public roadmap and feedback portal pages! Or perhaps, if you are new to our Telerik family, check out our getting started resources!
    Craig
    Posted on: 17 Jun 2024 22:13
    I cannot add unsafe-eval to our script-src CSP policy.
    Create an account Log In
    View
    Type
    Status
    Category