In order to fix this error, what would be the correct policy ids to add to the csp_whitelist.xmi file?

An Adobe Commerce developer has added an iframe and included a JavaScript library from an external domain to the website.

After that they found the following error in the console:

Refused to frame IURLJ because it violates the Content Security Policy directive.

In order to fix this error, what would be the correct policy ids to add to the csp_whitelist.xmi file?
A . default-src and object-src
B . frame-src and script-src
C . frame-ancentors and connect-src

View Answer

Answer: A