we are developing a magento store using latest version 2.4.8 magento csp is not allowing external domain & js including knockoutjs,cloudflarejs etc.., in checkout page. To resolve this we have created a csp whitelist custome module in our store “app/code/” folder. please check our csp_whitelist.xml
<csp_whitelist xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance”
xsi:noNamespaceSchemaLocation=”urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd”>
requirejs/require.js
knockout.js
</csp_whitelist>
we are getting following error in network console in checkout page.
**Refused to load the script ” because it violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’ “. Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.
Understand this error
checkout/:562 No facebook pixel is configured, please log in as a admin and then visit Stores -> Facebook -> Setup -> Get Started
ie-class-fixer.min.js:1 Failed to load resource: the server responded with a status of 404 ()Understand this error
checkout/#shipping:1 Refused to execute script from ‘https://example.com/*****en_US/mage/ie-class-fixer.min.js’ because its MIME type (‘text/html’) is not executable, and strict MIME type checking is enabled.Understand this error
8d1938cf1b74185461ecf5261246b56e.min.js:14 Uncaught Error: Script error for “mage/ie-class-fixer”, needed by: Magento_Theme/js/theme
https://requirejs.org/docs/errors.html#scripterror
at makeError (8d1938cf1b74185461ecf5261246b56e.min.js:17:53)
at HTMLScriptElement.onScriptError (8d1938cf1b74185461ecf5261246b56e.min.js:122:697)Understand this error
compat.min.js:1 Fallback to JQueryUI Compat activated. Your store is missing a dependency for a jQueryUI widget. Identifying and addressing the dependency will drastically improve the performance of your site.
(anonymous) @ compat.min.js:1Understand this warning
list.min.js:1 Failed to load resource: the server responded with a status of 404 ()Understand this error
checkout/#shipping:1 Refused to execute script from ‘https://example.com/***en_US/Magento_Checkout/js/view/shipping-method/list.min.js’ because its MIME type (‘text/html’) is not executable, and strict MIME type checking is enabled.Understand this error
console-output-handler.min.js:2 [2025-09-10 17:32:02+05:30] [ERROR] Failed to load the “Magento_Checkout/js/view/shipping-method/list” component. Due to “Error: Script error for “Magento_Checkout/js/view/shipping-method/list”
https://requirejs.org/docs/errors.html#scripterror”
ConsoleOutputHandler.show @ console-output-handler.min.js:2Understand this error
payment-service-mixin.min.js:1 Apple Pay is not supported or not available
console-output-handler.min.js:2 [2025-09-10 17:32:05+05:30] [ERROR] Failed to load the “Magento_Checkout/shipping-address/shipping-method-item” template requested by “undefined”.
ConsoleOutputHandler.show @ console-output-handler.min.js:2
(anonymous) @ logger.min.js:6
Logger.processOutput_ @ logger.min.js:6
Logger.log_ @ logger.min.js:3
Logger.error @ logger.min.js:3
(anonymous) @ engine.min.js:6
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
process @ jquery.min.js:225
setTimeout
(anonymous) @ jquery.min.js:226
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
fire @ jquery.min.js:217
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
mightThrow @ jquery.min.js:223
process @ jquery.min.js:223
setTimeout
(anonymous) @ jquery.min.js:226
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
fire @ jquery.min.js:217
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
deferred. @ jquery.min.js:228
(anonymous) @ loader.min.js:6
execCb @ 8d1938cf1b74185461ecf5261246b56e.min.js:122
context.execCb @ resolver.min.js:12
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:62
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:79
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:81
each @ 8d1938cf1b74185461ecf5261246b56e.min.js:4
emit @ 8d1938cf1b74185461ecf5261246b56e.min.js:81
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:67
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
init @ 8d1938cf1b74185461ecf5261246b56e.min.js:60
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:72
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
(anonymous) @ text.min.js:10
xhr.onreadystatechange @ text.min.js:8
XMLHttpRequest.send
getContent @ text.min.js:9
loadContent @ text.min.js:10
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:77
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
on @ 8d1938cf1b74185461ecf5261246b56e.min.js:42
callPlugin @ 8d1938cf1b74185461ecf5261246b56e.min.js:67
fetch @ 8d1938cf1b74185461ecf5261246b56e.min.js:61
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:62
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:111
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
each @ 8d1938cf1b74185461ecf5261246b56e.min.js:4
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:77
init @ 8d1938cf1b74185461ecf5261246b56e.min.js:60
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:107
setTimeout
req.nextTick @ 8d1938cf1b74185461ecf5261246b56e.min.js:128
localRequire @ 8d1938cf1b74185461ecf5261246b56e.min.js:107
defContext.require @ 8d1938cf1b74185461ecf5261246b56e.min.js:156
requirejs @ 8d1938cf1b74185461ecf5261246b56e.min.js:128
loadFromFile @ loader.min.js:6
loadTemplate @ loader.min.js:6
render @ renderer.min.js:1
RemoteTemplateEngine.makeTemplateSource @ engine.min.js:6
RemoteTemplateEngine.renderTemplate @ engine.min.js:9
executeTemplate @ knockout.min.js:486
ko.dependentObservable.disposeWhen @ knockout.min.js:493
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
ko.renderTemplate @ knockout.min.js:493
update @ knockout.min.js:505
RemoteTemplateEngine.ko.bindingHandlers.template.update @ engine.min.js:4
ko.dependentObservable.disposeWhenNodeIsRemoved @ knockout.min.js:336
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
(anonymous) @ knockout.min.js:336
arrayForEach @ knockout.min.js:17
applyBindingsToNodeInternal @ knockout.min.js:333
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
ko.applyBindings @ knockout.min.js:343
_super @ wrapper.min.js:2
applyBindings @ bound-nodes.min.js:9
(anonymous) @ wrapper.min.js:2
(anonymous) @ knockout.min.js:483
invokeForEachNodeInContinuousRange @ knockout.min.js:477
activateBindingsOnContinuousNodeArray @ knockout.min.js:482
activateBindingsCallback @ knockout.min.js:493
ko.utils.setDomNodeChildrenFromArrayMapping @ knockout.min.js:541
ignore @ knockout.min.js:141
setDomNodeChildrenFromArrayMapping @ knockout.min.js:494
ko.dependentObservable.disposeWhenNodeIsRemoved @ knockout.min.js:496
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
ko.renderTemplateForEach @ knockout.min.js:494
update @ knockout.min.js:504
RemoteTemplateEngine.ko.bindingHandlers.template.update @ engine.min.js:1
update @ knockout.min.js:396
ko.dependentObservable.disposeWhenNodeIsRemoved @ knockout.min.js:336
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
(anonymous) @ knockout.min.js:336
arrayForEach @ knockout.min.js:17
applyBindingsToNodeInternal @ knockout.min.js:333
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
applyBindingsToDescendantsInternal @ knockout.min.js:314
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
applyBindingsToDescendantsInternal @ knockout.min.js:314
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
applyBindingsToDescendantsInternal @ knockout.min.js:314
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
ko.applyBindings @ knockout.min.js:343
_super @ wrapper.min.js:2
applyBindings @ bound-nodes.min.js:9
(anonymous) @ wrapper.min.js:2
(anonymous) @ knockout.min.js:483
invokeForEachNodeInContinuousRange @ knockout.min.js:477
activateBindingsOnContinuousNodeArray @ knockout.min.js:482
executeTemplate @ knockout.min.js:488
ko.dependentObservable.disposeWhen @ knockout.min.js:493
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
evaluatePossiblyAsync @ knockout.min.js:203
notifySubscribers @ knockout.min.js:132
valueHasMutated @ knockout.min.js:151
observable @ knockout.min.js:145
(anonymous) @ engine.min.js:6
mightThrow @ jquery.min.js:221
process @ jquery.min.js:223
setTimeout
(anonymous) @ jquery.min.js:226
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
fire @ jquery.min.js:217
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
mightThrow @ jquery.min.js:223
process @ jquery.min.js:223
setTimeout
(anonymous) @ jquery.min.js:226
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
fire @ jquery.min.js:217
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
deferred. @ jquery.min.js:228
(anonymous) @ loader.min.js:6
execCb @ 8d1938cf1b74185461ecf5261246b56e.min.js:122
context.execCb @ resolver.min.js:12
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:62
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:79
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:81
each @ 8d1938cf1b74185461ecf5261246b56e.min.js:4
emit @ 8d1938cf1b74185461ecf5261246b56e.min.js:81
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:67
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
init @ 8d1938cf1b74185461ecf5261246b56e.min.js:60
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:72
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
(anonymous) @ text.min.js:10
xhr.onreadystatechange @ text.min.js:8
XMLHttpRequest.send
getContent @ text.min.js:9
loadContent @ text.min.js:10
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:77
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
on @ 8d1938cf1b74185461ecf5261246b56e.min.js:42
callPlugin @ 8d1938cf1b74185461ecf5261246b56e.min.js:67
fetch @ 8d1938cf1b74185461ecf5261246b56e.min.js:61
check @ 8d1938cf1b74185461ecf5261246b56e.min.js:62
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:111
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:80
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:12
each @ 8d1938cf1b74185461ecf5261246b56e.min.js:4
enable @ 8d1938cf1b74185461ecf5261246b56e.min.js:77
init @ 8d1938cf1b74185461ecf5261246b56e.min.js:60
(anonymous) @ 8d1938cf1b74185461ecf5261246b56e.min.js:107
setTimeout
req.nextTick @ 8d1938cf1b74185461ecf5261246b56e.min.js:128
localRequire @ 8d1938cf1b74185461ecf5261246b56e.min.js:107
defContext.require @ 8d1938cf1b74185461ecf5261246b56e.min.js:156
requirejs @ 8d1938cf1b74185461ecf5261246b56e.min.js:128
loadFromFile @ loader.min.js:6
loadTemplate @ loader.min.js:6
render @ renderer.min.js:1
RemoteTemplateEngine.makeTemplateSource @ engine.min.js:6
RemoteTemplateEngine.renderTemplate @ engine.min.js:9
executeTemplate @ knockout.min.js:486
ko.dependentObservable.disposeWhen @ knockout.min.js:493
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
ko.renderTemplate @ knockout.min.js:493
update @ knockout.min.js:505
RemoteTemplateEngine.ko.bindingHandlers.template.update @ engine.min.js:4
ko.dependentObservable.disposeWhenNodeIsRemoved @ knockout.min.js:336
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
ko.computed.ko.dependentObservable @ knockout.min.js:195
(anonymous) @ knockout.min.js:336
arrayForEach @ knockout.min.js:17
applyBindingsToNodeInternal @ knockout.min.js:333
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
applyBindingsToDescendantsInternal @ knockout.min.js:314
applyBindingsToNodeAndDescendantsInternal @ knockout.min.js:318
applyBindingsToDescendantsInternal @ knockout.min.js:314
ko.applyBindingsToDescendants @ knockout.min.js:341
ko.computed.disposeWhenNodeIsRemoved @ knockout.min.js:406
evaluateImmediate_CallReadThenEndDependencyDetection @ knockout.min.js:212
evaluateImmediate_CallReadWithDependencyDetection @ knockout.min.js:207
evaluateImmediate @ knockout.min.js:206
evaluatePossiblyAsync @ knockout.min.js:203
notifySubscribers @ knockout.min.js:132
valueHasMutated @ knockout.min.js:151
observable @ knockout.min.js:145
setShippingRates @ shipping-service.min.js:1
(anonymous) @ new-address.min.js:1
fire @ jquery.min.js:210
fireWith @ jquery.min.js:216
done @ jquery.min.js:627
(anonymous) @ jquery.min.js:640Understand this error
can someone help on this issue to resolved