1.6 HTTPS / security / infrastructureMediumInferred
CSP blocking needed resources
A Content-Security-Policy that is too strict can block the very scripts, styles or images the page needs, including ones Google must load to render. A good CSP protects without breaking rendering.
What it is
Content-Security-Policy too strict.
Why it matters
Can block legitimate scripts/styles, breaking render.
How to fix it
Scope CSP to allow required origins.
How to find it on your site
- Open the console and look for CSP violation reports.
- Identify legitimate resources being blocked.
- Loosen the policy to allow them, ideally with specific sources rather than wildcards.
- Re-render the page, including in URL Inspection, to confirm nothing needed is blocked.
Cross-reference to ranking and citation factors
If a CSP blocks render resources, Google can see a broken page, which undercuts on-page signals. The policy must allow what rendering needs.
Impact
Low-medium. Inferred.
Evidence
Mis-scoped CSP can break rendering Google needs. Google Search Central, Understand JavaScript SEO Basics