CSP violation on https://testrp.security.allizom.org/

[claudijd]

@gene1wood and I were testing something unrelated and noticed a CSP violation on this endpoint when following the "Nginx+Lua with Social, LDAP and Passwordless options" login option.

Here's a demo of the behavior, which triggers prior to actual login:

Please note that the destination URL is auth0.org (and not auth0.com).

[gene1wood]

@viorelaioia We should probably establish a test for this type of thing. @hidde I don't see auth0.org in the codebase so I'm unsure where this is coming from.

What UX symptoms would we see from the connection list for the client-id failing like this?