Content Security Policy (CSP) | Communifire Documentation

What is Content Security Policy?

Content Security Policy (CSP) is a security setting that sets the external sites your site can load resources from. If a resource comes from a site that isn't in the CSP whitelist, that resource is blocked. 

CSP protects against content injection attacks, such as Cross-Site Scripting (XSS). CSP allows administrators to reduce the risk of attacks on their site by specifying a whitelist of trusted sites that resources can be loaded from.

Learn more about CSP:

• Content Security Policy (CSP) — MDN Web Docs
• Improving Web Security with the Content Security Policy — Sitepoint

How can I set CSP for my intranet?

To request to set CSP for your intranet, please submit a private case here. In this case, include a list of which sites and domains should be whitelisted.

Which features does CSP affect?

Features that access external resources can be affected by CSP. Keep this in mind as you create the whitelist of trusted sites.

• Raw HTML Widget 
• IFrame Widget 
• Header and Footer Scripts