[wp-trac] [WordPress Trac] #63710: Content Security Policy (CSP) violations in WordPress – How to fix unsafe-inline script and style issues?

WordPress Trac noreply at wordpress.org
Thu Jul 17 06:23:09 UTC 2025


#63710: Content Security Policy (CSP) violations in WordPress – How to fix unsafe-
inline script and style issues?
--------------------------+------------------------------
 Reporter:  bensonap      |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  6.8.1
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by westonruter):

 * severity:  critical => normal


Comment:

 Hello!

 Quite a bit of work was done on this previously in #39941.

 See this comment for how you can use CSP on the frontend now:
 https://core.trac.wordpress.org/ticket/39941#comment:110

 To enable CSP in the admin without unsafe-inline, see this follow up
 ticket: #59446

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63710#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list