Hi Sang Chul Song,

For PowerServer 2021 and PowerClient, please try CSP policy like below.

<add name="Content-Security-Policy" value="default-src 'unsafe-inline' 'unsafe-eval' 'self' http://127.0.0.1:26568 http://127.0.0.1:26569 cloudapp:;" />

Please make sure it might need to clear browser cache to make the change take effect.

Regards,
ZhaoKai

Hi Sang Chul Song,

My solution is for PowerServer 2020 IWA applications only. For IWA, do you mean PowerSever 2020 IWA application or PowerServer 2021 Cloud App Launcher?

For PowerSever 2020:
I tested it on IIS and it works. I have no experience with NGINX, please provide the NGINX config to us to reproduce the issue for more study, thanks.

For PowerServer 2021 and PowerClient:
The framework Cloud App Launcher is more complicated, I need more time to figure it out. I will keep you updated on the progress.

Regards,
ZhaoKai

The change was completed as the story said.

WebSever Type   : nginx

But it's the same phenomenon.

The same phenomenon occurs with PowerClient.

The test was done with http.

PowerClinet is same

Hi Sang Chul Song,

Thanks for reporting this problem! We reproduced it on our end, please try work around the issue by modifying the CSP policy on the server side, for example:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<httpProtocol>
<customHeaders>
<add name="Content-Security-Policy" value="default-src 'unsafe-inline' 'unsafe-eval' 'self' http://127.0.0.1:26508;" />
</customHeaders>
</httpProtocol>
</system.webServer>
</configuration>

Regards,
ZhaoKai