Issue when hosting in powerapps, content blocked

[JoeHague86]

Hi all,

All was working fine yesterday, however now when trying to view the app once pushed to powerapps i get the following issue:

Framing 'https://9a259c5bf6a0e26f942c20c96f0dbc.aa.environment.api.powerplatformusercontent.com/' violates the following Content Security Policy directive: "frame-src 'self' https://amcdn.msftauth.net https://outlook.office.com https://webshell.suite.office.com/ https://.powerapps.com https://.powerplatform.com https://fpi.iom.dev-d365.dynamics.com https://fpi.iom.d365.dynamics.com https://*.blob.core.windows.net". The request has been blocked.

and the app will not load.

[JoeHague86]

additionally I am now not able to run the app locally either with the following error in MS Edge: Connecting to 'http://localhost:5173/__vite_powerapps_plugin__/power.config.json' violates the following Content Security Policy directive: "connect-src 'self' blob: https://.events.data.microsoft.com https://admin.microsoft.com https://config.edge.skype.com https://config.edge.skype.net https://graph.microsoft.com https://login.microsoftonline.com https://mop.svc.cloud.microsoft https://outlook.office365.com https://petrol.office.microsoft.com https://shell.cdn.office.net https://waconafd.officeapps.live.com https://waconatm.officeapps.live.com https://world.ces.microsoftcloud.com https://.api.bap.microsoft.com https://.api.powerapps.com https://.blob.core.windows.net https://.office.com https://.powerplatform.com https://res-1.cdn.office.net https://.common.uk.azure-apihub.net https://api.bap.microsoft.com https://.dynamics.com https://content.powerapps.com https://amcdn.msftauth.net https://js.monitor.azure.com https://.officeapps.live.com https://localcdn.centro-dev.com:5555 https://.api.powerplatformusercontent.com". The action has been blocked.

I am in the UK and only using connectors available via the platform

[ansjain215]

This is probably a bug with CSP Settings. Can you please disable CSP for Canvas Apps and confirm if that works?

[JoeHague86]

@ansjain215 @EvanCahill my initial concern is the app is not running locally now with the errors in the above comment. I don't see how removing CSP for canvas apps would help locally, however I will try for the hosted app.

Is there anything in the app structure which may cause these warnings or is there CPS configuration you can set in the code itself at all?

Reason I ask is I have other CodeApps which are running fine locally.