I updated GeneratePress this morning to the latest version, and now I am receiving several different errors that I wasn’t getting before.
script-src directive is missing. This can allow the execution of unsafe scripts.
Missing object-src allows the injection of plugins that execute unsafe scripts. Consider setting object-src to 'none' if you can.
Charset declaration is missing or occurs too late in the HTML
1.script-src Can you disable WP Rocket and Autoptimize and retest the site, if it still raises an issue temporarily disable any adverts as there are multiple 3rd party scripts that could be causing this.
2. this: Charset declaration is missing or occurs too late in the HTML – see here:
WP Rocket is injecting its lazy loading scripts before the charset meta tag ( highlighted in green ). Which looks to be the issue – if i disable WP Rocket by adding ?nowprocket to the URL when running the lighthouse test that warning is not reported,