Erro ao exibir "Olá mundo", por três vezes, na tela de Console

Question

Eu gostaria de saber, por gentileza, por que ao tentar visualizar a mensagem “Olá mundo” por três vezes na tela de “Console”, aparece essa mensagem de erro, mostrada abaixo? 676718f2f590508f5fe195f8:92 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-McpKUlOdOl0exLPn6JN3HQ==' https://code.jquery.com https://cdn.jsdelivr.net". Either the 'unsafe-inline' keyword, a hash ('sha256-A70QUc2Kse21wsA4D7Pq5ITbT/jYO221ulMbeKG0p3A='), or a nonce ('nonce-...') is required to enable inline execution.

Bobby · Answer

Hi there! This error occurs because your website has a Content Security Policy in place, which restricts the execution of inline scripts for security reasons. Inline JavaScript is blocked unless you explicitly allow it via a CSP directive. To fix this issue you could try: Instead of writing the script directly in the HTML file, move your JavaScript to an external .js file and reference it using a tag. This is the best practice for security and maintainability. Example: // hello-world.js console.log("Hello World"); console.log("Hello World"); console.log("Hello World"); Update your CSP to allow inline scripts by adding a nonce or hash for the script. For example: Replace your-nonce-value with the nonce value set in your server’s CSP header. Only if necessary: Locate your server configuration or meta tag defining the CSP. Update the script-src directive to include 'unsafe-inline' or add the appropriate nonce or hash. However, enabling 'unsafe-inline' weakens your security and is not recommended. For long-term security, option #1 is the most robust. Let me know if you need help implementing it! 😊 - Bobby

KFSys · Answer

Heya, The error message you’re seeing is related to Content Security Policy (CSP) restrictions that are blocking the execution of inline scripts in your web page. Why is this happening? CSP is preventing inline scripts – Your CSP directive specifies allowed sources for JavaScript using script-src. However, it does not include 'unsafe-inline', which means inline scripts (scripts written directly inside Ensure that script.js is being loaded from an allowed source (like 'self' if it’s on the same domain). 2. Use a Nonce (Preferred for Inline Scripts) If you must use inline scripts, add the appropriate nonce to the The nonce value must match what is set in the CSP header. 3. Modify CSP to Allow Inline Scripts (Less Secure) If you control the CSP policy, you could add 'unsafe-inline' to script-src, but this is generally not recommended for security reasons:

alexdo · Answer

Heya, @b7a48936ce14461794a3a55f6cf518 Instead of writing JavaScript inside your HTML, save it in a separate file. Create a file called script.js and add: console.log("Olá mundo"); console.log("Olá mundo"); console.log("Olá mundo"); In your HTML file, include it like this: This avoids CSP restrictions because external scripts are allowed by default. It’s the safest and most maintainable way to handle JavaScript. Regards

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

Erro ao exibir "Olá mundo", por três vezes, na tela de Console

Related questions

How are you handling the Axios supply chain attack in your deployments?

How to create Gradient KB via API?

DOM Manipulation in JavaScript

How to display modal using javascript when session timesout in a java application for OpenSAML Authentication method

What Are the Key Benefits of Using JavaScript's Pipeline Operator (|>) in 2025?

How to inject javascript into my Squarespace website

How to inject javascript into my Squarespace website

How to Code a Video Downloader for My Website Using PHP?

Spaces receives old assets from app platform (Django)

JS Logging in post webhook async function

Deploy Error Health Checks - Why will this Vite App will not deploy?

Deployment error: failed to launch: determine start command: process type web was not found.

Report this

Erro ao exibir "Olá mundo", por três vezes, na tela de Console

Related questions

How are you handling the Axios supply chain attack in your deployments?

How to create Gradient KB via API?

DOM Manipulation in JavaScript

How to display modal using javascript when session timesout in a java application for OpenSAML Authentication method

What Are the Key Benefits of Using JavaScript's Pipeline Operator (|>) in 2025?

How to inject javascript into my Squarespace website

How to inject javascript into my Squarespace website

How to Code a Video Downloader for My Website Using PHP?

Spaces receives old assets from app platform (Django)

JS Logging in post webhook async function

Deploy Error Health Checks - Why will this Vite App will not deploy?

Deployment error: failed to launch: determine start command: process type web was not found.