module-braintree-magento2
module-braintree-magento2 copied to clipboard
Remove unsafe-inline as a host in CSP style-src policy
Remove "unsafe-inline" as a host in CSP whitelist config.
It does add a unsafe-inline string in the Content-Security-Policy HTTP header which is not valid.
The real unsafe-inline directive is already handled in the magento/module-csp/etc/config.xml file:
<styles>
<policy_id>style-src</policy_id>
<self>1</self>
<inline>1</inline>
<eval>0</eval>
<dynamic>0</dynamic>
</styles>