{"id":214,"date":"2019-05-24T09:58:14","date_gmt":"2019-05-24T09:58:14","guid":{"rendered":"https:\/\/demo.everestthemes.com\/gucherry\/?p=214"},"modified":"2022-01-03T11:05:18","modified_gmt":"2022-01-03T11:05:18","slug":"fixed-content-security-policy-warning-magento2","status":"publish","type":"post","link":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/","title":{"rendered":"Fixed: Content Security Policy(CSP) Magento2"},"content":{"rendered":"\r\n<p>Magento 2 has introduced a new robust tool called &#8220;Content Security Policy&#8221; (CSP) which is used to defense and prevent different type of attacks like related data injection, click jacking, card skimmers, session hijacking and many more on your Magento 2 store.<\/p>\r\n\r\n<p>&nbsp;<\/p>\r\n\r\n<h3>Disable Magento 2 Content Security Policy<\/h3>\r\n\r\n\r\n\r\n<p>You can disable the Content Security Policy completely but by disabling the CSP will compromise your store security with more possible attacks. Third party extension(s) in your store also includes third party APIs like fontawesome.com, trustedshops.com, gstatic.com, cloudflare.com, twitter.com etc. <br \/>By disabling the csp, all third party extension APIs will directly execute without even checking the security and possible attacks. Hence as a solution, instead of disabling the csp, you can whitelist the external apis.<\/p>\r\n\r\n<p>&nbsp;<\/p>\r\n\r\n<h3>CSP works in 2 modes<\/h3>\r\n\r\n\r\n\r\n<ul>\r\n<li style=\"list-style-type: none;\">\r\n<ul>\r\n<li><strong>reports-only<\/strong>: By default, the csp is set to the default mode. In this mode, magento store simply reports the violations of csp policy without any interfere. These violations are reported to the browser console. CSP has both options for enable\/disable the feature for fronend and backend respectively.<\/li>\r\n<li><strong>restrict-mode<\/strong>: In this mode, magento 2 store violates the csp policy. When your store tries to execute the files or urls which is not whitelisted then magento will block those urls from loading which in result does not permit to fully execute or load the page.<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n<p><img class=\"alignnone size-full wp-image-459\" src=\"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/csp-violate-1.jpg\" alt=\"restrict-mode\" width=\"1343\" height=\"131\" srcset=\"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/csp-violate-1.jpg 1343w, https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/csp-violate-1-300x29.jpg 300w, https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/csp-violate-1-1024x100.jpg 1024w, https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/csp-violate-1-768x75.jpg 768w\" sizes=\"(max-width: 1343px) 100vw, 1343px\" \/><\/p>\r\n<p>&nbsp;<\/p>\r\n\r\n\r\n\r\n<h3>Solution: steps to solve and whitelist the csp issue<\/h3>\r\n\r\n<p>1) <strong>Create<\/strong> or Register your module: app\/code\/Magemart\/Cspfix\/registration.php<br \/><br \/><\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"classic\" data-enlighter-linenumbers=\"false\">&lt;?php\r\n    \\Magento\\Framework\\Component\\ComponentRegistrar::register(\r\n        \\Magento\\Framework\\Component\\ComponentRegistrar::MODULE,\r\n        'Magemart_Cspfix',\r\n        __DIR__\r\n    );<\/pre>\r\n<p><br \/>2) Now <strong>Create<\/strong> module.xml file at Path:- app\/code\/Magemart\/Cspfix\/etc\/module.xml<br \/><br \/><code class=\"EnlighterJSRAW\" data-enlighter-language=\"xml\">&lt;config xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\" xsi:noNamespaceSchemaLocation=\"urn:magento:framework:Module\/etc\/module.xsd\"&gt;\r\n    &lt;module name=\"Magemart_Cspfix\" setup_version=\"1.0.0\" \/&gt;\r\n&lt;\/config&gt;<\/code><\/p>\r\n<p><br \/>3)Now the last step: <strong>Create<\/strong> a csp_whitelist.xml to whitelist the external site path:<\/p>\r\n<p>The naming convention for the csp_whitelist.xml file name is fixed. Here you will simply need to add the external site name to whitelist them. There can be multiple policy under the policies tag.<\/p>\r\n<ul>\r\n<li>policy id=&#8221;script-src&#8221;<\/li>\r\n<li>policy id=&#8221;img-src&#8221;<\/li>\r\n<li>policy id=&#8221;font-src&#8221;<\/li>\r\n<li>policy id=&#8221;frame-src&#8221;<\/li>\r\n<li>policy id=&#8221;connect-src&#8221;<\/li>\r\n<li>policy id=&#8221;media-src&#8221;<\/li>\r\n<li>policy id=&#8221;form-action&#8221;<\/li>\r\n<\/ul>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"xml\">&lt;?xml version=\"1.0\"?&gt;\r\n&lt;csp_whitelist xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\" xsi:noNamespaceSchemaLocation=\"urn:magento:module:Magento_Csp\/etc\/csp_whitelist.xsd\"&gt;\r\n    &lt;policies&gt;\r\n         &lt;policy id=\"frame-src\"&gt;\r\n            &lt;values&gt;\r\n                \r\n                &lt;value id=\"sandbox.paypal.com\" type=\"host\"&gt;http:\/\/www.sandbox.paypal.com&lt;\/value&gt;\r\n                &lt;value id=\"youtube.com\" type=\"host\"&gt;https:\/\/www.youtube.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"paypal.com\" type=\"host\"&gt;www.paypal.com&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"form-action\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"media-src\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"zopimio\" type=\"host\"&gt;*.zopim.io&lt;\/value&gt;\r\n                &lt;value id=\"zopim\" type=\"host\"&gt;*.zopim.com&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"style-src\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"bing\" type=\"host\"&gt;*.bing.com&lt;\/value&gt;\r\n                &lt;value id=\"googleapis\" type=\"host\"&gt;*.googleapis.com&lt;\/value&gt;\r\n                &lt;value id=\"cloudflare\" type=\"host\"&gt;*.cloudflare.com&lt;\/value&gt;\r\n                &lt;value id=\"typekit\" type=\"host\"&gt;*.typekit.net&lt;\/value&gt;\r\n                &lt;value id=\"twimg\" type=\"host\"&gt;*.twimg.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"gstatic\" type=\"host\"&gt;*.gstatic.com&lt;\/value&gt;\r\n                &lt;value id=\"fontawesome\" type=\"host\"&gt;*.fontawesome.com&lt;\/value&gt;\r\n                &lt;value id=\"trustedshops\" type=\"host\"&gt;*.trustedshops.com&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"script-src\"&gt;\r\n            &lt;values&gt;\r\n            \t&lt;value id=\"google\" type=\"host\"&gt;*.google.com&lt;\/value&gt;\r\n                &lt;value id=\"cloudflare\" type=\"host\"&gt;*.cloudflare.com&lt;\/value&gt;\r\n                &lt;value id=\"fontawesome\" type=\"host\"&gt;*.fontawesome.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"zopim\" type=\"host\"&gt;*.zopim.com&lt;\/value&gt;\r\n                &lt;value id=\"usercentrics\" type=\"host\"&gt;*.usercentrics.eu&lt;\/value&gt;\r\n                &lt;value id=\"google-analytics\" type=\"host\"&gt;*.google-analytics.com&lt;\/value&gt; \r\n                &lt;value id=\"bing\" type=\"host\"&gt;*.bing.com&lt;\/value&gt;\r\n                &lt;value id=\"zdassets\" type=\"host\"&gt;*.zdassets.com&lt;\/value&gt;\r\n                \r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"img-src\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"twimg\" type=\"host\"&gt;*.twimg.com&lt;\/value&gt;\r\n                &lt;value id=\"cloudflare\" type=\"host\"&gt;*.cloudflare.com&lt;\/value&gt;\r\n                &lt;value id=\"fontawesome\" type=\"host\"&gt;*.bing.com&lt;\/value&gt;\r\n                &lt;value id=\"googleadservices\" type=\"host\"&gt;*.googleadservices.com&lt;\/value&gt;\r\n                &lt;value id=\"klarna-base\" type=\"host\"&gt;*.klarna.com&lt;\/value&gt;\r\n                &lt;value id=\"google-analytics\" type=\"host\"&gt;*.google-analytics.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"paypal\" type=\"host\"&gt;*.paypal.com&lt;\/value&gt;\r\n                &lt;value id=\"data\" type=\"host\"&gt;'self' data:&lt;\/value&gt;\r\n                &lt;value id=\"google\" type=\"host\"&gt;*.google.com&lt;\/value&gt;\r\n                &lt;value id=\"googlein\" type=\"host\"&gt;*.google.co.in&lt;\/value&gt;\r\n                &lt;value id=\"zopim\" type=\"host\"&gt;*.zopim.com&lt;\/value&gt;\r\n                &lt;value id=\"zopimio\" type=\"host\"&gt;*.zopim.io&lt;\/value&gt;\r\n                &lt;value id=\"mastercard\" type=\"host\"&gt;*.mastercard.com&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        &lt;policy id=\"font-src\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"googleapis\" type=\"host\"&gt;*.googleapis.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"cloudflare\" type=\"host\"&gt;*.cloudflare.com&lt;\/value&gt;\r\n                &lt;value id=\"typekit\" type=\"host\"&gt;*.typekit.net&lt;\/value&gt;\r\n                &lt;value id=\"gstatic\" type=\"host\"&gt;*.gstatic.com&lt;\/value&gt;\r\n                &lt;value id=\"trustedshops\" type=\"host\"&gt;*.trustedshops.com&lt;\/value&gt;\r\n                &lt;value id=\"twimg\" type=\"host\"&gt;*.twimg.com&lt;\/value&gt;\r\n                &lt;value id=\"zopim\" type=\"host\"&gt;*.zopim.com&lt;\/value&gt;\r\n                &lt;value id=\"zopimio\" type=\"host\"&gt;*.zopim.io&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt;\r\n        \r\n        &lt;policy id=\"connect-src\"&gt;\r\n            &lt;values&gt;\r\n                &lt;value id=\"googleanalytics\" type=\"host\"&gt;*.google-analytics.com&lt;\/value&gt;\r\n                &lt;value id=\"google-analytics\" type=\"host\"&gt;www.google-analytics.com&lt;\/value&gt;\r\n                &lt;value id=\"twitter.com\" type=\"host\"&gt;*.twitter.com&lt;\/value&gt;\r\n                &lt;value id=\"cloudflare\" type=\"host\"&gt;*.cloudflare.com&lt;\/value&gt;\r\n                &lt;value id=\"twimg\" type=\"host\"&gt;*.twimg.com&lt;\/value&gt;\r\n                &lt;value id=\"paypal\" type=\"host\"&gt;*.paypal.com&lt;\/value&gt;\r\n                &lt;value id=\"zdassets\" type=\"host\"&gt;*.zdassets.com&lt;\/value&gt;\r\n                &lt;value id=\"mediator\" type=\"host\"&gt;wss:\/\/widget-mediator.zopim.com&lt;\/value&gt;\r\n                &lt;value id=\"zopim\" type=\"host\"&gt;*.zopim.com&lt;\/value&gt;\r\n                &lt;value id=\"zopimio\" type=\"host\"&gt;*.zopim.io&lt;\/value&gt;               \r\n                &lt;value id=\"doubleclick\" type=\"host\"&gt;https:\/\/stats.g.doubleclick.net&lt;\/value&gt;\r\n            &lt;\/values&gt;\r\n        &lt;\/policy&gt; \r\n    &lt;\/policies&gt;\r\n&lt;\/csp_whitelist&gt;<\/pre>","protected":false},"excerpt":{"rendered":"<p>Magento 2 has introduced a new robust tool called &#8220;Content Security Policy&#8221; (CSP) which is used to defense and prevent different type of attacks like related data injection, click jacking, card skimmers, session hijacking and many more on your Magento&#8230;<\/p>\n","protected":false},"author":1,"featured_media":492,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"link","meta":[],"categories":[2],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups\" \/>\n<meta property=\"og:description\" content=\"Magento 2 has introduced a new robust tool called &#8220;Content Security Policy&#8221; (CSP) which is used to defense and prevent different type of attacks like related data injection, click jacking, card skimmers, session hijacking and many more on your Magento...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/\" \/>\n<meta property=\"og:site_name\" content=\"Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups\" \/>\n<meta property=\"article:published_time\" content=\"2019-05-24T09:58:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-03T11:05:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"blogger\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/magemart.com\/blog\/#website\",\"url\":\"https:\/\/magemart.com\/blog\/\",\"name\":\"Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups\",\"description\":\"Magento 2 Blog - Tutorials\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/magemart.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#primaryimage\",\"url\":\"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png\",\"contentUrl\":\"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png\",\"width\":300,\"height\":300,\"caption\":\"Order import export\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#webpage\",\"url\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/\",\"name\":\"Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups\",\"isPartOf\":{\"@id\":\"https:\/\/magemart.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#primaryimage\"},\"datePublished\":\"2019-05-24T09:58:14+00:00\",\"dateModified\":\"2022-01-03T11:05:18+00:00\",\"author\":{\"@id\":\"https:\/\/magemart.com\/blog\/#\/schema\/person\/2c91379496056d72c517bd174de62f01\"},\"breadcrumb\":{\"@id\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/magemart.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fixed: Content Security Policy(CSP) Magento2\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/magemart.com\/blog\/#\/schema\/person\/2c91379496056d72c517bd174de62f01\",\"name\":\"blogger\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/magemart.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4a3eade0d810e3dedef3cce822c9440d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4a3eade0d810e3dedef3cce822c9440d?s=96&d=mm&r=g\",\"caption\":\"blogger\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/","og_locale":"en_US","og_type":"article","og_title":"Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups","og_description":"Magento 2 has introduced a new robust tool called &#8220;Content Security Policy&#8221; (CSP) which is used to defense and prevent different type of attacks like related data injection, click jacking, card skimmers, session hijacking and many more on your Magento...","og_url":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/","og_site_name":"Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups","article_published_time":"2019-05-24T09:58:14+00:00","article_modified_time":"2022-01-03T11:05:18+00:00","og_image":[{"width":300,"height":300,"url":"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"blogger","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/magemart.com\/blog\/#website","url":"https:\/\/magemart.com\/blog\/","name":"Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups","description":"Magento 2 Blog - Tutorials","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/magemart.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#primaryimage","url":"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png","contentUrl":"https:\/\/magemart.com\/blog\/wp-content\/uploads\/2019\/05\/order-server.png","width":300,"height":300,"caption":"Order import export"},{"@type":"WebPage","@id":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#webpage","url":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/","name":"Fixed: Content Security Policy(CSP) Magento2 - Magento 2 Blog - Tutorials \/ Devdocs | Magemart-AheadGroups","isPartOf":{"@id":"https:\/\/magemart.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#primaryimage"},"datePublished":"2019-05-24T09:58:14+00:00","dateModified":"2022-01-03T11:05:18+00:00","author":{"@id":"https:\/\/magemart.com\/blog\/#\/schema\/person\/2c91379496056d72c517bd174de62f01"},"breadcrumb":{"@id":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/magemart.com\/blog\/fixed-content-security-policy-warning-magento2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/magemart.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Fixed: Content Security Policy(CSP) Magento2"}]},{"@type":"Person","@id":"https:\/\/magemart.com\/blog\/#\/schema\/person\/2c91379496056d72c517bd174de62f01","name":"blogger","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/magemart.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4a3eade0d810e3dedef3cce822c9440d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4a3eade0d810e3dedef3cce822c9440d?s=96&d=mm&r=g","caption":"blogger"}}]}},"_links":{"self":[{"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/posts\/214"}],"collection":[{"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/comments?post=214"}],"version-history":[{"count":32,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/posts\/214\/revisions"}],"predecessor-version":[{"id":487,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/posts\/214\/revisions\/487"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/media\/492"}],"wp:attachment":[{"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/media?parent=214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/categories?post=214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/magemart.com\/blog\/wp-json\/wp\/v2\/tags?post=214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}