I'm checking my website's error console and I see that there are errors in the console:

[Report Only] Refused to frame 'https://ct.pinterest.com/' because it violates the following Content Security Policy directive

I have already created the csp_whitelist.xml file and whitelisted this site but the message still exists.

<policy id="frame-src">
         <value id="pinterest" type="host">https://ct.pinterest.com</value>

I don't want to disable the CSP module but I want to fix these errors in console. How can I do?

2 Answers 2


Try this


<?xml version="1.0"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
        <policy id="frame-src">
                <value id="ct.pinterest.com" type="host">ct.pinterest.com</value>
  • I tried man but unfortunately with same result... :( How can i do?
    – Jackom
    Apr 21 at 9:10


<policy id="frame-src">
            <value id="pinterest" type="host">pinterest.com</value>
            <value id="subpinterest" type="host">*.pinterest.com</value>

I hope this can help someone ;)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.