1
Verify the likely cause
Read the exact browser CSP violation, use nonce- or hash-based script authorization and avoid broad unsafe-inline exceptions.
FULL AI ANALYSIS
Content Security Policy blocks production login redirect
Generated Sep 25, 2026, 11:55:04 AM
Analysis summary
The reported behaviour is consistent with the callback bundle or inline bootstrap violates script-src rather than connect-src. The safest next step is to verify that hypothesis with a reversible test before making permanent configuration changes.
Possible causes
The callback bundle or inline bootstrap violates script-src rather than connect-src.
85%A recent software, firmware or configuration change is exposing an existing compatibility issue.
37%Suggested fixes
2
Validate and monitor
Reproduce the issue once after the change, review relevant logs or metrics, and keep a rollback path until the system has remained stable.