Syncfusion Blazor Security

Name: Syncfusion Blazor Security
Author: aibot88

ASecurity

Configure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios

4 stars
0 votes
0 copies
2 views
Added September 12, 2026

developmentsecurity

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add aibot88/sec_skill_store --skill syncfusion-blazor-security --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Syncfusion Blazor Security?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Syncfusion Blazor Security

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aibot88-syncfusion-blazor-security/badge)](https://www.skillsdirectory.com/skills/aibot88-syncfusion-blazor-security)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: syncfusion-blazor-security
description: Configure Content Security Policy (CSP) for Syncfusion Blazor components across Blazor Server, WebAssembly, and Auto render modes � self-hosted and CDN scenarios
metadata:
  author: "Syncfusion Inc"
  version: "33.1.44"
---

# Syncfusion Blazor Security

Content Security Policy (CSP) configuration for Syncfusion Blazor components in browser-hosted applications (.NET 8, 9, 10).

## When to Use

Use this skill when you need to:
- Add a CSP `<meta>` tag to `App.razor` or `index.html` for Syncfusion components
- Configure CSP for self-hosted (Static Web Assets) script and style delivery
- Configure CSP for CDN-hosted Syncfusion scripts and styles
- Understand which CSP directives Syncfusion components require and why

## Quick Reference

- **Full CSP guide**: See [content-security-policy.md](references/content-security-policy.md)

## Required CSP Directives at a Glance

| Directive | Value | Reason |
|-----------|-------|--------|
| `font-src` | `'self' data:` | Base64-encoded icon fonts |
| `style-src` | `'self' 'unsafe-inline'` | Inline styles for sizing/positioning |
| `script-src` | `'self'` | Dynamic code evaluation (animations, etc.) |
| `connect-src` | `'self' https: wss:` | WebSocket and HTTPS connections |
| `img-src` | `data: https:` | Inline images and remote assets |
| `object-src` | `'none'` | Block plugin content |

> **CDN users**: also append `https://cdn.syncfusion.com/blazor/` to `script-src` and `style-src`.

## Where to Add the CSP Tag

| Project Type | File |
|---|---|
| Blazor Web App (.NET 8/9/10) any render mode | `~/Components/App.razor` |
| Blazor WebAssembly Standalone | `wwwroot/index.html` |