axios header中添加
‘Content-Security-Policy’: “script-src ‘self’; object-src ‘none’;style-src cdn.example third-party; child-src https:”

更多推荐

vue缺失Content-Security-Policy响应头