Problems with the CSP directive

[Sickboards]

We are running presta 1.7.5 and we recently noticed an issue with multi modules giving the same error:

Refused to display '[link to module]' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

Modules giving an error:

• Advanced Search 4
• Creative Slider

If we try it in IE7 it is giving an error but one can continue.

What can we do to counter this problem?

 

[pixelicous]

 

What does your Content-Security-Policy header looks like?

[musicmaster]

On 11/22/2019 at 6:35 PM, Sickboards said:

Refused to display '[link to module]' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

Sounds rather strict: no frames allowed. Better to have: frame-ancestors 'self'

If you have a hosting provider: ask them as it is likely a server setting (it can also be in .htaccess - but then you have to had added it).