If you enable strict cross site scripting rules. (Where you don't allow scripts from domains other then those that have been pre-approved) You may get development instance where styles don't load, assets don't and/or images don't load.
This isn't a bug with MDOQ or with your site, it is simply your broswer adhering to the specified rules. (By default MDOQ updates your URLs for development instances and places them under the mdoq.io domain) If you don't specify mdoq.io as an allowed domain then your browser will not allow the assets to be loaded. Even if you don't use MDOQs managed Magento hosting, you may still need to do this for your development domain.
Symptoms
- instance has no images
- instance has no style
- Your browser console reports `blocked:csp`
Cause
Either in a modules config.xml or within the admin, `report_only` is set to `0`
Fix
Within your `csp_whitelist.xml` for each policy you need to add the following entry
<value id="mdoq" type="host">*.mdoq.io</value>
After adding this to each policy, flush your Magento cache and then all should work.
If you are still having issues please get in touch.