Yes, you are right.
Now I added “child-src *.mydomain.com” at the end of the “Header always set Content-Security-Policy”. That works for me. My “external” sites are now displayed.
Thank you very much for your help!
1 Like