Content Security Policy (CSP) — Syncfusion ASP.NET MVC (Security)

Use this skill for high-level, Syncfusion-specific CSP guidance and vulnerability-free configurations. Detailed implementation patterns and troubleshooting live in the concern's references files.

When to Use

• Implementing CSP headers for Syncfusion EJ2 controls in ASP.NET MVC
• Running in strict CSP mode where inline scripts/styles are restricted
• Blocking XSS, data injection, and other browser-based attacks
• Allowlisting CDN resources, external fonts, and trusted origins
• Validating and testing CSP compliance in development and production
• Troubleshooting CSP violation errors in browser console

ASP.NET MVC-Specific CSP Implementation

• Location: Meta tag in ~/Views/Shared/_Layout.cshtml head, or HTTP headers via IIS/code
• Scope: Applied globally to all views; can be overridden per view if needed
• Script Manager: Syncfusion's ScriptManager may require unsafe-inline mitigation via nonces

Key CSP Directives for Syncfusion