we are in the process of rebuilding our website so that all inline javascript code goes out.
However, we are also using the decently old google translate widget. Which adds an iframe at the end of the page and thus the CSP policy is triggered. Is there a clean way to prevent google translate from setting the iframe ? or that you can turn it off during initialization ? unfortunately i can't find any proper documentation on the web anymore, since the feature is already considered deprecated.
implementation
function googleTranslateElementInit(gaId) {
new google.translate.TranslateElement({
pageLanguage: 'de',
layout: google.translate.TranslateElement.InlineLayout.VERTICAL,
gaTrack: true,
gaId: gaId
}, 'google_translate_element');
}
script and css is loaded from google
in the iframe is only a copy of the js code from google translate