I have a subscribe button, that works fine with live, but when I use my personal sandbox account the PayPal javascript causes this error:
"Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'nonce-...' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn
The lines in question appear to be these:
<script src="https://www.paypalobjects.com/web/res/6c9/f8e157a9463713ebc4806df66bb2b/js/framework.js" onload="scriptload('framework', event)" crossorigin="anonymous"></script>
<script src="https://www.paypalobjects.com/web/res/6c9/f8e157a9463713ebc4806df66bb2b/js/config.js" onload="scriptload('config', event)" onerror="scripterror(event)"></script>
<script src="https://www.paypalobjects.com/web/res/6c9/f8e157a9463713ebc4806df66bb2b/js/main.js" onload="scriptload('main', event)" crossorigin="anonymous"></script>
The onload seems to violate chrome's CSP
