How to disable Magento 2 Content Security Policy with theme edit only

Question

I have searched alot on the internet and I want to hide this error (magento 2.4)

content security policy error , we don't have authority to disable magento_csp module and we can not create module, we just have theme, what are the best options to figure out this issue

Answer 1

Solution for Magento 2.4.6 or above

You can bypass the Magento_CSP by using the around plugin:

Create your di.xml in any custom module

<?xml version="1.0"?>
<config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:framework:Module/etc/module.xsd">
    <type name="Magento\Csp\Observer\Render">
        <plugin name="ByPassCSPValidation" type="Vendor_Module\Plugin\ByPassCSPValidation" />
    </type>
</config>

Create a Plugin Vendor\Module\Plugin\ByPassCSPValidation

<?php

namespace Vendor\Module\Plugin;

use Magento\Csp\Observer\Render;

class ByPassCSPValidation
{
    public function aroundExecute(Render $subject, callable $proceed)
    {
       // Do nothing
    }
}

Thanks

Answer 2

Please disable Magento_Csp module

php bin/magento module:disable Magento_Csp

php bin/magento s:up

php bin/magento c:c

OR

Into Magento_root/app/etc/config.php find Magento_Csp and put 1 to 0 like this then save the file and run php bin/magento s:up command.

'Magento_Csp' => 0,

I Hope This Helps You.