tool · inferred from evidence
content-security-policy
A header used to enforce Content Security Policy.
- Typeform embed blocked in Capacitor/Cordova: CSP `frame-ancestors` violation
Typeform had tightened their CSP `frame-ancestors` headers, which broke loading inside Capacitor/Cordova webviews (they run on `capacitor://` and `ionic://` origins that CSP did not allow). The two different behaviors you see are because Ty