'Unrecognized Content-Security-Policy directive “reflected-xss'” error related to PayPal generated via chromedriver

Question

For some reasons our continuous integration tests have failed since 7 feb 2017(Tue).

The log are generated via https://github.com/SeleniumHQ/selenium/wiki/JsonWireProtoc

Answer 1

Downgrade to chromium-55.0.2883.87-1 (ChromeDriver 2.24 ) helps me

Answer 2

Chrome has deprecated this CSP in versions 56 and newer

https://www.chromestatus.com/feature/5769374145183744

It would be up to the site you're actually visiting to apply headers correctly, so not something you can control from your client side tests.