Magento 2.3.5 violates the following Content Security Policy

Question

I installed the ebay module m2pro but it doesn't work properly due to the magento csp policy, here some screenshot:

screen 1

I noticed that 2 scripts are blocked:

screen 2

screen 3

screen 4

How I can solve this problem without disabling CSP? Thanks

Answer 1

You have to add domain to CSP whitelist: https://devdocs.magento.com/guides/v2.3/extension-dev-guide/security/content-security-policies.html#add-a-domain-to-the-whitelist

For images you can add this: <value id="[ID]" type="host">https://</value>

All images from https won't be block.