Content Violation Policy

Spod is suddenly causing plugins like Yoast SEO and the built-in plugin installer to stop working. The error provided when trying to view a plugin’s details is: Refused to frame: wp-admin/plugin-install.php?tab=plugin-information&plugin=wc-spod& because it violates the following Content Security Policy directive: “child-src app.spod.com”. Note that ‘frame-src’ was not explicitly set, so ‘child-src’ is used as a fallback. When editing a page, this is what the console shows: Refused to create a worker from ‘blob:32r932-234234-67567-43177’ because it violates the following Content Security Policy directive: “child-src app.spod.com”. Note that ‘worker-src’ was not explicitly set, so ‘child-src’ is used as a fallback. It makes it impossible to set SEO keywords in the page editor, and I cannot fetch details about a plugin in the popup window before installing it. Once I deactivate SPOD, everything works as expected. Sadly, I am having a similar issue with SPOD v2.0.0 refusing to load frames. The Appearance > Customize part of the backend will not load the site example. When looking at plugins, the “View details” link does not open. Aside from that everything else seemed to be working fine. I don’t use Yoast SEO, but I do use Rank Math and it has been working 100% even with SPOD enabled. When I disable SPOD, everything goes back to normal. Well, this issue has been resolved with a new update that was released. However, it created another issue which I will bring up in a separate post.