Questions tagged [content-security-policy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Magento2.4 refused to load all external resources

I have a Magento2.4 website and when I view the console I see the below errors. I read about creating a CSP module to whitelist the domain names however it does not seem to work? I do see ...
0
votes
1answer
33 views

Magento 2.4.1 Custom Content Security Policy (CSP) whitelist for connect-src not Working

I created a whitelist for content-src CSP like this: <policy id="connect-src"> <values> <value id="cloudflare" type="host">*....
0
votes
0answers
11 views

Category/search images not showing in Firefox

I get Content Security Policy errors in Firefox. I have a CSP module that handles this just fine in Chrome, but this remains an issue in Firefox. Are there more steps that have to be taken to make ...
0
votes
1answer
63 views

X-Frame-Options in Magento 2.3.5-p1

I've set X-Frame-Options 'x-frame-options' => '*', in env as mentioned in the doc Magento Docs But still I'm getting this error Refused to display 'https://mythridpartyurlhere.com/' in a frame ...
0
votes
1answer
31 views

Magento 2.3.5 Content Security Policy CSP for Worker

I was really annoyed by the lack of documentation around the following console errors showing up. [Report Only] Refused to create a worker from 'blob:https://domain.com/535c516f-8a3a-4d17-b0c0-...
2
votes
0answers
59 views

Magento 2: Content Security Policy disabled, still get errors

So I started a new magento project with 2.3.5-p1 and stumbled right into the new CSP feature. I figured it out and created my custom csp_whitelist.xml All fine and dandy but then I stumbled upon this ...