Menu
Feedback
Start here

Known issues

Known issues
Console error [Report Only] - Refused to apply inline style because it violates the following Content Security
Payments
ID: 1017370
Backlog
Published on4/16/2024
Last updated on4/16/2024
1 min read

Summary

We have some logs in the console reporting script blocks due to restrictions via the CSP header. The inline style calls to the host io2.vtex.com have this blocking log because it is not released in the CSP of the previous host, thus generating error messages in the console.

[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' https://io.vtex.com.br https://.vtex.com.br https://.vtexpayments.com.br https://.myvtex.com https://.vtexcommercestable.com.br https://.vtexcommercebeta.com.br https://.vteximg.com.br https://*.vtexassets.com 'report-sample'". Either the 'unsafe-inline' keyword, a hash ('sha256-AdqydPwVZwz4OteEhuvEEzsFBDTM/J6q0/ZlIWf9Wr4='), or a nonce ('nonce-...') is required to enable inline execution.

Simulation

  1. Go to store checkout;
  2. Open the console and check the report messages;

Workaround

N/A

Contributors
1
Photo of the contributor
+ 1 contributors
Was this helpful?
Yes
No
Suggest Edits (GitHub)
Contributors
1
Photo of the contributor
+ 1 contributors
On this page
Still got questions?
Ask the community
Find solutions and share ideas in the VTEX Community
Join our community
Request VTEX support
For personalized assistance, contact our experts
Open a support ticket
GitHubDeveloper PortalCommunityFeedback