Content Security Policy (CSP)

If you need to enforce content security policy (CSP) on the users browsers you can enable CSP on ngSurvey using following environment variable.

NGSurvey:CPSPolicymust be set to "Self" will enforce the content security policy (CSP) on the browser.

Note that your CSP must allow unsafe inline CSS styles :

style-src 'self' 'unsafe-inline';

Widget based answer items and any custom javascript related features like form codes, custom answer validations will be disabled if set to Self.