Thank you!! This is your first issue on this repo

Seems to be a strapi issue, since it works again with the recent strapi ver 4.19.1

Seems to be a strapi issue, since it works again with the recent strapi ver 4.19.1

I have still this issue on 4.19.1

Refused to load https://editor.unlayer.com/embed.js?2 because it does not appear in the script-src directive of the Content Security Policy.

I need to add editor.unlayer.com/embed.js to the script-src directive

Seems to be a strapi issue, since it works again with the recent strapi ver 4.19.1

I have still this issue on 4.19.1

Refused to load https://editor.unlayer.com/embed.js?2 because it does not appear in the script-src directive of the Content Security Policy.

I need to add editor.unlayer.com/embed.js to the script-src directive

Hi, can you share an example of how you do that ?

'script-src': ["'self'", "'unsafe-inline'",'editor.unlayer.com/embed.js','editor.unlayer.com/embed.js?2='],

I used that but did not work.

Thanks !

Seems to be a strapi issue, since it works again with the recent strapi ver 4.19.1

I have still this issue on 4.19.1
Refused to load https://editor.unlayer.com/embed.js?2 because it does not appear in the script-src directive of the Content Security Policy.
I need to add editor.unlayer.com/embed.js to the script-src directive

Hi, can you share an example of how you do that ?

'script-src': ["'self'", "'unsafe-inline'",'editor.unlayer.com/embed.js','editor.unlayer.com/embed.js?2='],

I used that but did not work.

Thanks !

Try this:

contentSecurityPolicy: { useDefaults: true, directives: { 'connect-src': ["'self'", 'https:'], 'img-src': ["'self'", 'data:', 'blob:', 'res.cloudinary.com', "cdn.jsdelivr.net", "strapi.io", "s3.amazonaws.com"], 'media-src': ["'self'", 'data:', 'blob:', 'res.cloudinary.com'], "script-src": ["'self'", "editor.unlayer.com", "editor.unlayer.com/embed.js"], "frame-src": ["'self'", "editor.unlayer.com"], }, },

I did nothing different. Just deleted the node_modules, .strapi and all dist folders, and upgraded strapi to the latest via yarn.Now it works.

Seems to be a strapi issue, since it works again with the recent strapi ver 4.19.1

I have still this issue on 4.19.1
Refused to load https://editor.unlayer.com/embed.js?2 because it does not appear in the script-src directive of the Content Security Policy.
I need to add editor.unlayer.com/embed.js to the script-src directive

Hi, can you share an example of how you do that ?
'script-src': ["'self'", "'unsafe-inline'",'editor.unlayer.com/embed.js','editor.unlayer.com/embed.js?2='],

I used that but did not work.
Thanks !

Try this:

contentSecurityPolicy: { useDefaults: true, directives: { 'connect-src': ["'self'", 'https:'], 'img-src': ["'self'", 'data:', 'blob:', 'res.cloudinary.com', "cdn.jsdelivr.net", "strapi.io", "s3.amazonaws.com"], 'media-src': ["'self'", 'data:', 'blob:', 'res.cloudinary.com'], "script-src": ["'self'", "editor.unlayer.com", "editor.unlayer.com/embed.js"], "frame-src": ["'self'", "editor.unlayer.com"], }, },

@kubarazny Thanks, that works for me !

That indeed fixed the issue, but now I cannot see the icons of plugins in marketplace, any suggestions how can I fix that? I'm very new to strapi (like today) so I'm sorry for the n00bish question.

UPDATE:
Adding "market-assets.strapi.io" to img-src fixed it.