CORS issue

[palsypentertainment]

Love the script. I am currently setting up CORS policies (in report-only mode for now) and have encountered a minor issue or annoyance. Although everything still works (obviously, in reporting-mode), am seeing this:

The main script is imported in the config.js, not sure if that has anything to do with it.

Thanks.

[orestbida]

This doesn't have anything to do with the plugin but rather with the CSP configuration. It says that inline scripts are not allowed, so I assume you are using inline scripts.

[palsypentertainment]

I spent the day moving all my JS to external files with an integrity of sha384 and a crossorigin....... So am not sure how it's flagging that I am.

[orestbida]

Weird, I would need to check the site if there'a live url. Did you try moving the "import" statement outside the config. script?