Syncfusion Blazor Security

When to Use

• Add a CSP

  <meta>

  tag to

  App.razor

  or

  index.html

  for Syncfusion components
• Configure CSP for self-hosted (Static Web Assets) script and style delivery
• Configure CSP for CDN-hosted Syncfusion scripts and styles
• Understand which CSP directives Syncfusion components require and why

Quick Reference

• Full CSP guide: See content-security-policy.md

Required CSP Directives at a Glance

font-src

'self' data:

style-src

'self' 'unsafe-inline'

script-src

'self'

connect-src

'self' https: wss:

img-src

data: https:

object-src

'none'

CDN users: also append

https://cdn.syncfusion.com/blazor/

to

script-src

and

style-src

.

Where to Add the CSP Tag

~/Components/App.razor

wwwroot/index.html