Google Maps doesn’t work with enabled Content-Security-Policy

  • Resolved rovor

    (@rovor)


    1 year, 1 month ago

    Hello,

    First of all than you for your plugin! I’m using it for about month or two without any troubles. But today Google Map on the website disappear and there is message “This content is blocked. Contact the site owner to fix the issue.” I tried to find out what is going on and found this: https://www.reddit.com/r/Wordpress/comments/1hjwz80/wp_error_this_content_is_blocked_contact_the_site/ There is advise:

    with nginx,

    add_header Content-Security-Policy “default-src * data: ‘unsafe-eval’ ‘unsafe-inline’; frame-src ‘self’ blob:;” always;

    solved same problem for me.

    So, I tried to disable Content-Security-Policy header and Google Maps is working again. Please, could you resolve this so that Google Maps will be working with Content-Security-Policy header enabled?

    Thank you very much in advance.

    Kind regards
    Roman

Viewing 1 replies (of 1 total)
  • Plugin Author MOHIT GOYAL

    (@mohitgoyal1108)

    11 months, 2 weeks ago

    Hi Roman,

    Thank you so much for your feedback and for using our plugin!

    We’ve recently updated the plugin to Version 3.0, which includes major improvements — including better handling of custom Content-Security-Policy (CSP) settings.

    Could you please update to the latest version of the plugin and test again?
    In the new version, you can set a custom CSP directly from the plugin settings to allow Google Maps (and similar services) to work properly while still keeping your site secure.

    If you face any issues, you can try adding a custom CSP like:

    default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';
frame-src 'self' https://www.google.com/ https://maps.googleapis.com/;
script-src 'self' https://maps.googleapis.com/ https://maps.gstatic.com/ 'unsafe-inline' 'unsafe-eval';
style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline';

    This will allow Google Maps without compromising your site’s security.

    Please update the plugin and let us know if it works for you!
    We are here to help if you need any assistance setting up the custom CSP.

    Thank you again for your support!

    Kind regards,
    Inspired Monks Team

Viewing 1 replies (of 1 total)

The topic ‘Google Maps doesn’t work with enabled Content-Security-Policy’ is closed to new replies.