We get a lot of [Report Only] Refused to load because it does not appear in the script-src directive of the Content Security Policy. errors in the browser console in the cart and in the checkout.
For example:
[Report Only] Refused to load https://www.owndomain.com/static/version1647099076/frontend/Theme/theme/en_EN/Magento_Checkout/js/view/cart/shipping-estimation.js because it does not appear in the script-src directive of the Content Security Policy.
We only face them on those two pages, category and product page are working fine.
These refused to load are all internal resources, like default Magento checkout JS files.
How can we solve this issue?
