Google Adsense content security policy error

[awesomerobot (Kris)]

See Mitigate XSS Attacks with Content Security Policy, here’s the relevant portion (you can find these settings by searching your site settings for content security policy):

Mitigate XSS Attacks with Content Security Policy

If your site uses an advertising service (like Google Ad Manager, Adsense, etc.) you probably will have to use a very permissive policy:

In the screenshot above, the policy allows any script from a https: source and any inline script. (In the future, this might be replaced by the strict-dynamic keyword, but as of this writing, strict-dynamic isn’t supported by Safari or Edge.)