syncfusion-aspnetmvc-security

name	syncfusion-aspnetmvc-security
description	**CONTENT SECURITY POLICY (CSP) GUIDE** — Assist with configuring Syncfusion ASP.NET MVC EJ2 components to work with strict Content Security Policy (CSP) headers. Use when: implementing CSP headers, applying nonces to inline scripts/styles, configuring external font allowlists, or troubleshooting CSP violations and XSS protections.
metadata	{"author":"Syncfusion Inc","version":"34.1.29","platform":"ASP.NET MVC"}

Content Security Policy (CSP) — Syncfusion ASP.NET MVC (Security)

Use this skill for high-level, Syncfusion-specific CSP guidance and vulnerability-free configurations. Detailed implementation patterns and troubleshooting live in the concern's references files.

When to Use

• Implementing CSP headers for Syncfusion EJ2 controls in ASP.NET MVC
• Running in strict CSP mode where inline scripts/styles are restricted
• Blocking XSS, data injection, and other browser-based attacks
• Allowlisting CDN resources, external fonts, and trusted origins
• Validating and testing CSP compliance in development and production
• Troubleshooting CSP violation errors in browser console

ASP.NET MVC-Specific CSP Implementation

• Location: Meta tag in ~/Views/Shared/_Layout.cshtml head, or HTTP headers via IIS/code
• Scope: Applied globally to all views; can be overridden per view if needed
• Script Manager: Syncfusion's ScriptManager may require unsafe-inline mitigation via nonces

Key CSP Directives for Syncfusion

Core Directives Required