RS policy:

Hi @northen ,

Thank you for trying Optimole and contacting us!

The images are being blocked when used inside the canvas element of the plugin that you are using to customize the product since the images are being served from a different domain than the one where the canvas is being displayed. This is the default behavior of the canvas element in HTML. You can try to add this to your .htaccess

<IfModule mod_setenvif.c>
  <IfModule mod_headers.c>
    <FilesMatch "\.(bmp|cur|gif|ico|jpe?g|png|svgz?|webp)$">
      SetEnvIf Origin ":" IS_CORS
      Header set Access-Control-Allow-Origin "*" env=IS_CORS
    </FilesMatch>
  </IfModule>
</IfModule>

In short, this configures the server to allow graphic files (those with the extensions “.bmp”, “.cur”, “.gif”, “.ico”, “.jpg”, “.jpeg”, “.png”, “.svg”, “.svgz”, and “.webp”) to be accessed cross-origin from anywhere on the internet.

I hope this helps!

Hey @northen

Did you try to add the code to the .htaccess file? if not can you please try and check if solves the issue? For most of the users, this code solves the issue even with js files.

Thank you!

Hey @northen

Thank you for providing the error, it’s clear now. Your JavaScript is blocked by the website because of the strict content policy used on your WordPress instance.
There are two options here, you can disable this setting in Optimole – https://vertis.d.pr/i/OME2Kr and then your CSS/JS files won’t be served by Optimole.

The alternative (recommended) solution would be to allow serving files from 3rd party domains (like Optimole)

<IfModule mod_setenvif.c>
  <IfModule mod_headers.c>
    <FilesMatch "\.(bmp|cur|gif|js|ico|jpe?g|png|svgz?|webp)$">
      SetEnvIf Origin ":" IS_CORS
      Header set Access-Control-Allow-Origin "*" env=IS_CORS
    </FilesMatch>
  </IfModule>
</IfModule>

Sorry for any confusion, the previous code that I provided didn’t have js extension in the list that’s why it was not working. Can you try this code and let us know how it goes?

I hope this helps and if it doesn’t help please ask your hosting provider about allowing resources from external domains to be served on your website.