I am using Cloudflare Zaraz and have added some custom tracking code, but it shows the message: “Content Security Policy of your site blocks some resources.”

[wyfang]

Even though I used add_header Content-Security-Policy "default-src * 'unsafe-inline' 'unsafe-eval';"; in Nginx, it still happens.


Why?