Latest update conflicting with my Content-Security-Policy

Support
#1

Hello,
Seeing some errors in my console related to my Content Security Policy. Please see my attached image (hidden) for more information. I haven’t found anything that’s broken yet. Will continue testing.

#2

Hello @brocknessmonster,

Thanks for writing to us.

I would suggest you please have a look at this article to learn more about how to configure the content security policy.


Hope it helps
Thanks

#3

The only way I can clear the errors in my console is to allow unsafe-inline which is not acceptable.

#4

Hey @brocknessmonster,

This is related your your Content Security Policy (CSP) configuration that may have been cause by a plugin or custom code. Be advised that the theme that not have anything to do with this. You may resolved this by allowing the script as specified in the articles provided by @prakash_s.

Thank you for your understanding.

#5

I can’t change my CSP as that would expose users to potential exploits. I had to refactor several of my plugins because they used inline JavaScript. I had to move that JavaScript into separate files and use a script tag to link to them.

I don’t expect your team to refactor the Pro theme to address this issue. This post was intended as a heads up.

#6

Hey @brocknessmonster,

Got it. Thanks for sharing on what’s happening on your site.

Cheers.