https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/csp-requires-unsafe-inline/m-p/1696036#M88358 <P>Echoing this other post:&nbsp;<A href="https://community.esri.com/t5/arcgis-javascript-maps-sdk-ideas/remove-styleapplyer-to-meet-content-security/idi-p/1601812" target="_blank" rel="noopener">https://community.esri.com/t5/arcgis-javascript-maps-sdk-ideas/remove-styleapplyer-to-meet-content-security/idi-p/1601812</A></P><P>The documentation here suggests that only script-src: 'wasm-unsafe-eval' and worker-src: blob: are required for the maps sdk to work:&nbsp;<A href="https://developers.arcgis.com/javascript/latest/faq/#does-the-prod_name_long-support-all-content-security-policy-csp-directives" target="_blank" rel="noopener">https://developers.arcgis.com/javascript/latest/faq/#does-the-prod_name_long-support-all-content-security-policy-csp-directives</A>&nbsp;</P><P>However, in practice we find that if we set style-src without 'unsafe-inline', SceneViews do not work.</P><P>See a minimal repro in this sandbox:&nbsp;<A href="https://codesandbox.io/p/sandbox/arcgis-csp-repro-4ndd2z" target="_blank" rel="noopener">https://codesandbox.io/p/sandbox/arcgis-csp-repro-4ndd2z</A>&nbsp;</P><P>It isn't configured correctly so the auto starting task crashes, but you can run it with the following steps:</P><OL><LI>Open a new terminal</LI><LI>npm install</LI><LI>npm run dev</LI><LI>Pop out the preview in a new window&nbsp;</LI></OL><P>Note that the scene seems to load but a bunch of things don't work properly within the SceneView</P><P>&nbsp;</P> Tue, 14 Apr 2026 05:51:21 GMT urbanmyth 2026-04-14T05:51:21Z https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/csp-requires-unsafe-inline/m-p/1696036#M88358 <P>Echoing this other post:&nbsp;<A href="https://community.esri.com/t5/arcgis-javascript-maps-sdk-ideas/remove-styleapplyer-to-meet-content-security/idi-p/1601812" target="_blank" rel="noopener">https://community.esri.com/t5/arcgis-javascript-maps-sdk-ideas/remove-styleapplyer-to-meet-content-security/idi-p/1601812</A></P><P>The documentation here suggests that only script-src: 'wasm-unsafe-eval' and worker-src: blob: are required for the maps sdk to work:&nbsp;<A href="https://developers.arcgis.com/javascript/latest/faq/#does-the-prod_name_long-support-all-content-security-policy-csp-directives" target="_blank" rel="noopener">https://developers.arcgis.com/javascript/latest/faq/#does-the-prod_name_long-support-all-content-security-policy-csp-directives</A>&nbsp;</P><P>However, in practice we find that if we set style-src without 'unsafe-inline', SceneViews do not work.</P><P>See a minimal repro in this sandbox:&nbsp;<A href="https://codesandbox.io/p/sandbox/arcgis-csp-repro-4ndd2z" target="_blank" rel="noopener">https://codesandbox.io/p/sandbox/arcgis-csp-repro-4ndd2z</A>&nbsp;</P><P>It isn't configured correctly so the auto starting task crashes, but you can run it with the following steps:</P><OL><LI>Open a new terminal</LI><LI>npm install</LI><LI>npm run dev</LI><LI>Pop out the preview in a new window&nbsp;</LI></OL><P>Note that the scene seems to load but a bunch of things don't work properly within the SceneView</P><P>&nbsp;</P> Tue, 14 Apr 2026 05:51:21 GMT https://community.esri.com/t5/arcgis-javascript-maps-sdk-questions/csp-requires-unsafe-inline/m-p/1696036#M88358 urbanmyth 2026-04-14T05:51:21Z