How to Fix the "Content Blocked" Error on Your Magento Store's WeSupply Tracking Page?

If you have embedded the WeSupply tracking page on your Magento store and are encountering an error message stating "This content is blocked. Contact the site owner to fix the issue.", this guide will help you resolve the problem.

The error is likely due to the WeSupply domain not being added to your Content Security Policy (CSP) on your website. Follow the steps below to add the WeSupply domain and iframe to your CSP policy and ensure the tracking page is rendered correctly.

Step 1: Identify Your We Supply Domain
Before making any changes to your CSP policy, you need to identify the WeSupply domain associated with the iframe on your Magento store. This domain is usually in the format "https://youraccountname.labs.wesupply.xyz"

Step 2: Access Your Magento Store's Admin Panel
Log in to your Magento store's admin panel using your administrator credentials.

Step 3: Navigate to the CSP Configuration
From the admin panel, go to "Stores" > "Configuration" > "Security" > "Content Security Policy."

Step 4: Modify Your CSP Policy
In the "Content Security Policy" section, you will find various policies that control the resources allowed to load on your website. Locate the "frame-src" or "child-src" policy, which controls the domains allowed to embed iframes on your site.

Step 5: Add the WeSupply Domain to Your CSP Policy
Add the WeSupply domain (identified in Step 1) to the "frame-src" or "child-src" policy. Ensure that you separate the WeSupply domain from any existing domains in the policy with a space. For example, if your policy currently looks like this:

```
default-src 'self'; frame-src 'self' https://example.com;
```

Update it to include the WeSupply domain:

```
default-src 'self'; frame-src 'self' https://example.com https://youraccountname.labs.wesupply.xyz;
```

Step 6: Save Your Changes
Click the "Save Config" button to apply your changes. Your Magento store's CSP policy should now allow the We Supply iframe to be rendered on your website.

Step 7: Clear Cache and Test
Clear your Magento store's cache by navigating to "System" > "Cache Management" and clicking the "Flush Magento Cache" button. Then, visit the order tracking page on your website to ensure that the We Supply tracking page is now rendering correctly.

By following these steps, you should have successfully resolved the "content blocked" error on your Magento store's WeSupply tracking page. Your customers will now be able to access the tracking information for their orders without any issues.