Restricting the Content Security Policy header can cause checkout files not to be loaded. For example, the default-src 'self' configuration can cause files coming from vtex.com not to be loaded

1. Set default-src of the Content Security Policy

2. try to buy something through checkout

3. See the error on the console

   Content Security Policy: the page's settings blocked the loading of a resource at

Remove the header