Content Security Policy overwritten by Page Shield Policy?

What is the name of the domain?

example.com

What is the issue you’re encountering

Page Shield Policy appears to overwrite/ignore Content Security Policy values from the origin

What steps have you taken to resolve the issue?

How does a Content Security Policy set at the origin work with a Content Security Policy set via Page Shield? What I’d like to do is set a nonce at the origin (for pages that won’t be cached by Cloudflare) and have it be added to the Content Security Policy setup in Page Shield. Is that possible? Or must I disable Page Shield Policies if I want to propagate a nonce from the origin?

Many thanks,
Dominic

What is the current SSL/TLS setting?

Full (strict)

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.