Claude
Skills
Sign in
Back

syncfusion-blazor-security

Included with Lifetime
$97 forever

Configure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios

Image & Video

What this skill does


# Syncfusion Blazor Security

Content Security Policy (CSP) configuration for Syncfusion Blazor components in browser-hosted applications (.NET 8, 9, 10).

## When to Use

Use this skill when you need to:
- Add a CSP `<meta>` tag to `App.razor` or `index.html` for Syncfusion components
- Configure CSP for self-hosted (Static Web Assets) script and style delivery
- Configure CSP for CDN-hosted Syncfusion scripts and styles
- Understand which CSP directives Syncfusion components require and why

## Quick Reference

- **Full CSP guide**: See [content-security-policy.md](references/content-security-policy.md)

## Required CSP Directives at a Glance

| Directive | Value | Reason |
|-----------|-------|--------|
| `font-src` | `'self' data:` | Base64-encoded icon fonts |
| `style-src` | `'self' 'unsafe-inline'` | Inline styles for sizing/positioning |
| `script-src` | `'self'` | Dynamic code evaluation (animations, etc.) |
| `connect-src` | `'self' https: wss:` | WebSocket and HTTPS connections |
| `img-src` | `data: https:` | Inline images and remote assets |
| `object-src` | `'none'` | Block plugin content |

> **CDN users**: also append `https://cdn.syncfusion.com/blazor/` to `script-src` and `style-src`.

## Where to Add the CSP Tag

| Project Type | File |
|---|---|
| Blazor Web App (.NET 8/9/10) any render mode | `~/Components/App.razor` |
| Blazor WebAssembly Standalone | `wwwroot/index.html` |

Related in Image & Video