search

lyra / plugin-magento

An open source plugin that links Magento based e-commerce websites to PayZen secure payment gateway developed by Lyra Network.
https://lyra.com/fr/guides/magento/
Open Software License 3.0
10 stars 12 forks source link

Disabled report only mode for CSP blocks every external resource if not whitelisted #43

Closed norgeindian closed 1 month ago

norgeindian commented 1 month ago

Please be so kind and take a look into etc/config.xml. The following disabled the report only mode for the entire storefront:

        <csp>
            <mode>
                <storefront>
                    <report_only>0</report_only>
                </storefront>
                <admin>
                    <report_only>0</report_only>
                </admin>
            </mode>
        </csp>

That means, that every external resource is directly blocked, if it is not whitelisted, no matter which module tries to load it. Please be so kind and remove this setting again.

nberhouche commented 1 month ago

Hello @norgeindian ,

Thank you for bringing this issue to our attention. We'll get to it as soona s possible.

Best regards

GIMALima commented 1 month ago

Hello,

The issue was resolved in our latest version.

Best regards.