search

shipperhq / module-address-autocomplete

ShipperHQ Address Autocomplete for Magento 2
Open Software License 3.0
15 stars 20 forks source link

Missing CSP Rules #26

Closed ProxiBlue closed 2 years ago

ProxiBlue commented 3 years ago

Out the box autocomplete fails as Chrome refuses to load external maps library:

Refused to load the script 'https://maps.googleapis.com/maps/api/js?key=##########&libraries=places&callback=google_maps_loaded' because it violates the following Content Security Policy directive: "script-src ...."
ProxiBlue commented 3 years ago

Once that is fixed, further policy issues related to images

Refused to load the image 'https://maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png' because it violates the following Content Security Policy directive: "img-src ..."
wsajosh commented 2 years ago

Thanks for raising this and providing the fix! Its fixed in the upcoming release