Add Ignored Url

framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersMiddleware.cs

@@ -31,7 +31,7 @@ public class AbpSecurityHeadersMiddleware : IMiddleware, ITransientDependency
         
         var contentSecurityPolicyValueDictionary = Options.Value.ContentSecurityPolicyValueDictionary.ToDictionary(x=>x.Key, x=>x.Value);
 
-        if (Options.Value.UseContentSecurityPolicyHeader)
+        if (Options.Value.UseContentSecurityPolicyHeader && !Options.Value.IgnoredUrls.Any(x => context.Request.Path.StartsWithSegments(x.EnsureStartsWith('/'))))
         {
             if (Options.Value.UseContentSecurityPolicyNonce)
             {

framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersOptions.cs

@@ -11,10 +11,13 @@ public class AbpSecurityHeadersOptions
     public Dictionary<string,IEnumerable<string>> ContentSecurityPolicyValueDictionary { get; }
 
     public Dictionary<string, string> Headers { get; }
+    
+    public List<string> IgnoredUrls { get; }
 
     public AbpSecurityHeadersOptions()
     {
         Headers = new Dictionary<string, string>();
         ContentSecurityPolicyValueDictionary = new Dictionary<string, IEnumerable<string>>();
+        IgnoredUrls = new List<string> { "/swagger" };
     }
 }