Imported from syncfusion/blazor-ui-components-skills (skills/syncfusion-blazor-security/SKILL.md). Install upstream with npx skills add syncfusion/blazor-ui-components-skills --skill syncfusion-blazor-security. Copyright stays with the author.

Syncfusion Blazor Security

Name: syncfusion-blazor-security
Author: syncfusion

Content Security Policy (CSP) configuration for Syncfusion Blazor components in browser-hosted applications (.NET 8, 9, 10).

When to Use

Use this skill when you need to:

Add a CSP <meta> tag to App.razor or index.html for Syncfusion components
Configure CSP for self-hosted (Static Web Assets) script and style delivery
Configure CSP for CDN-hosted Syncfusion scripts and styles
Understand which CSP directives Syncfusion components require and why

Quick Reference

Full CSP guide: See content-security-policy.md

Required CSP Directives at a Glance

Directive	Value	Reason
`font-src`	`'self' data:`	Base64-encoded icon fonts
`style-src`	`'self' 'unsafe-inline'`	Inline styles for sizing/positioning
`script-src`	`'self'`	Dynamic code evaluation (animations, etc.)
`connect-src`	`'self' https: wss:`	WebSocket and HTTPS connections
`img-src`	`data: https:`	Inline images and remote assets
`object-src`	`'none'`	Block plugin content

CDN users: also append https://cdn.syncfusion.com/blazor/ to script-src and style-src.

Where to Add the CSP Tag

Project Type	File
Blazor Web App (.NET 8/9/10) any render mode	`~/Components/App.razor`
Blazor WebAssembly Standalone	`wwwroot/index.html`

{ "ocm": "1", "id": "syncfusion-blazor-ui-components-skills-syncfusion-blazor-3f8aa6", "kind": "skill", "name": "syncfusion-blazor-security", "description": "Configure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios", "publisher": "syncfusion", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Configure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios" ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/syncfusion/blazor-ui-components-skills", "path": "skills/syncfusion-blazor-security/SKILL.md", "ref": "HEAD", "url": "https://github.com/syncfusion/blazor-ui-components-skills/blob/HEAD/skills/syncfusion-blazor-security/SKILL.md", "key": "syncfusion/blazor-ui-components-skills/skills/syncfusion-blazor-security/SKILL.md" } }, "instructions": "# Syncfusion Blazor Security\n\nContent Security Policy (CSP) configuration for Syncfusion Blazor components in browser-hosted applications (.NET 8, 9, 10).\n\n## When to Use\n\nUse this skill when you need to:\n- Add a CSP `<meta>` tag to `App.razor` or `index.html` for Syncfusion components\n- Configure CSP for self-hosted (Static Web Assets) script and style delivery\n- Configure CSP for CDN-hosted Syncfusion scripts and styles\n- Understand which CSP directives Syncfusion components require and why\n\n## Quick Reference\n\n- **Full CSP guide**: See [content-security-policy.md](references/content-securit", "cost": { "context_tokens": 354 } }

syncfusion-blazor-security

About

Syncfusion Blazor Security

When to Use

Quick Reference

Required CSP Directives at a Glance

Where to Add the CSP Tag

Use it

Manifest

Reviews