title: The Content-Security-Policy directive 'frame-ancestors' does not support the source expression ''unsafe-inline'' for allowed site
body: <p>I am working on a Magento 2 site with a custom extension to add a whitelist to Magento's CSP. I am running into an issue with the following error: &quot;The Content-Security-Policy directive 'frame-ancestors' does not support the source expression ''unsafe-inline''&quot;</p>
  <p>The source of this issue is the following file: <a href="https://translate.googleapis.com/element/TE_20210503_00/e/js/element/element_main.js" rel="nofollow noreferrer">https://translate.googleapis.com/element/TE_20210503_00/e/js/element/element_main.js</a></p>
  <p>The problem is, I have this site whitelisted under frame-ancestors, yet it's still being blocked. Here is the policy I have so far:</p>
  <pre><code>&lt;policy id=&quot;frame-ancestors&quot;&gt;
      &lt;values&gt;
          &lt;value id=&quot;google-apis&quot; type=&quot;host&quot;&gt;*.googleapis.com&lt;/value&gt;
      &lt;/values&gt;
  &lt;/policy&gt;
  </code></pre>
  <p>This is the same format I have for all other policies and all those policies have been whitelisted correctly. This is the only one that isn't being affected.</p>
  <p>I have followed this tutorial for making my CSP extension, for reference: <a href="https://magento.stackexchange.com/a/312350/73083">https://magento.stackexchange.com/a/312350/73083</a></p>
  <p>I'm not sure what I am doing wrong, this is the last issue I need to fix before adding CSP to the site.</p>