magento-2-smtp icon indicating copy to clipboard operation
magento-2-smtp copied to clipboard

Published 20 hours ago • verified publisher icon mageplaza

Content Security Policy Issue

Open TectonicKestrel opened this issue 4 years ago • 2 comments

Preconditions (*)

  1. Magento 2.4.2
  2. Mageplaza SMTP Version 4.3.2

Steps to reproduce (*)

  1. Click on "Marketing" > "Newsletter" or any option under "Email Marketing"

Expected result (*)

  1. Corect admin pages to load

Actual result (*)

  1. Error on page due to Content Secuirty Policy blocking avada.io newsletter1 newsletter2

I dont want avada.io to load, i dont need it. Marketing Automation module is disabled yet this still tries to load. *.avada.io is only in the csp whitelist for script-src, not frame-src but i dont see why i should have to add it when it is disabled and i dont want anything to do with avada.

TectonicKestrel avatar May 31 '21 14:05 TectonicKestrel

Hi,

To fix your problem, please download the file 'csp_whitelist.xml' at the following link: https://drive.google.com/file/d/1OiLz8P1A77GUJAcRzHFTFRjBeXSGO4XT/view?usp=sharing Then replace that file in 'Mageplaza/Smtp/etc/csp_whitelist.xml' folder and try again for me.

You can refer to the following article for more details: https://devdocs.magento.com/guides/v2.4/extension-dev-guide/security/content-security-policies.html

Thank you!

HuyPhuc98 avatar Jun 02 '21 12:06 HuyPhuc98

I am aware how to fix it, but why is avada.io trying to load scripts when marketing automation is turned off?

TectonicKestrel avatar Jun 02 '21 12:06 TectonicKestrel