Skip to content

Magento 2 – how to fix CSP module [Report Only] messages?

I’m checking my website’s error console and I see that there are errors in the console:

[Report Only] Refused to frame 'https://ct.pinterest.com/' because it violates the following Content Security Policy directive

I have already created the csp_whitelist.xml file and whitelisted this site but the message still exists.

<policy id="frame-src">
         <value id="pinterest" type="host">https://ct.pinterest.com</value>
</policy>

I don’t want to disable the CSP module but I want to fix these errors in console. How can I do?