I found the problem! It was another plugin *Business Directory version 5.3.3*
I disabled the plugin and how Http-headers works again!
Don’t know why the plugins are conflicting, but …
// Anders
When trying to set up CSP use Content-Security-Policy-Report-Only: instead of Content-Security-Policy:
Then you only will get an report for the errors but the site will still continue to load.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy-Report-Only
Also a big help is the https://report-uri.com/ web site which logs all errors and present them in a nice way.
// Anders
Same problem here!
If I enter the code manually it works but …
Thank you for the link.
I will try these and see if they are what I want!
// Anders
