CORS issue

[palsypentertainment]

Love the script. I am currently setting up CORS policies (in report-only mode for now) and have encountered a minor issue or annoyance. Although everything still works (obviously, in reporting-mode), am seeing this:

The main script is imported in the config.js, not sure if that has anything to do with it.

Thanks.

[orestbida]

This doesn't have anything to do with the plugin but rather with the CSP configuration. It says that inline scripts are not allowed, so I assume you are using inline scripts.

[palsypentertainment]

I spent the day moving all my JS to external files with an integrity of sha384 and a crossorigin....... So am not sure how it's flagging that I am.

[orestbida]

Weird, I would need to check the site if there'a live url. Did you try moving the "import" statement outside the config. script?

[palsypentertainment]

Still having issues with this....... I need to add 'unsafe-inline' to the script-src to make CORS happy.

Did you try moving the "import" statement outside the config. script?

Can you explain this. Do you mean just include the *.umd.js in a <script> tag?