product · inferred from evidence
Content Security Policy
A security layer that helps prevent cross-site scripting (XSS) and other code injection attacks by restricting the sources from which content can be loaded.
- Typeform embed blocked in Capacitor/Cordova: CSP `frame-ancestors` violation
Our Typeform embed recently stopped loading inside our Capacitor and Cordova mobile apps. The console shows: `Refused to load .. the frame-ancestors directive of the Content Security Policy.` We changed nothing in our code. On iOS some of o
- Braze web SDK unusable without 'unsafe-eval' Content Security Policy
A site with a strict Content Security Policy (no 'unsafe-eval') loads the Braze web SDK through Google Tag Manager, one of Braze's recommended methods. The SDK's initialization snippet used `new Function("")`, which the CSP blocks, and rela