Invalid Content Security Policy (CSP) Directive Identified in meta Elements

Summary

The following CSP directives cannot be used in meta elements and can only be set via headers:

• frame-ancestors
• sandbox
• report-uri
  

Remediation

Move these CSP directives to headers.

Severity

Information

Classification