Customize : Themeco refused to connect

[afuego]

When I visit Customize, I get message my site refused to connect. Its being happening often, please advise

[afuego]

I figure out I will need to whitelist the source on my header. if I commented out the following line it works

#add_header Content-Security-Policy “frame-ancestors ‘none’;”;

Do you know what I should add on Content Security Policy so Customize works.

i.e. default-src’self’* blob: data: *.theme.co

Kind regards

[ruenel]

Hello @afuego,

Thanks for writing in! It seems that you are having a server related issues. Please check out this articles instead:

• https://docs.presscustomizr.com/article/232-customizer-appearance-customize-is-not-working
• https://passwordprotectwp.com/fix-wordpress-customizer-not-working/
• https://www.fixrunner.com/wordpress-customizer-not-working-7-easy-ways-to-fix/

Best Regards.

[afuego]

its not a server issue, what are the settings to enable Theme.co on my content security policy headers.

For example for Adobe Typekit fonts is;

add_header Content-Security-Policy “default-src ‘self’; script-src ‘self’ use.typekit.net; connect-src ‘self’ performance.typekit.net; img-src ‘self’ p.typekit.net; style-src ‘self’ ‘unsafe-inline’ use.typekit.net;”;

[christian]

Hey @afuego,

First of all, this is not an issue with our theme. Content Security Policy IS a server related setting or setup. Kindly read about that here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

With that said, it is you or your web host to check what has been blocked and allow the blocked resources.

We do not have an answer to your question:

@afuego

what are the settings to enable Theme.co on my content security policy headers.

I checked your site afuego.com and there’s no resource coming from theme.co.

Thank you for understanding.