When I am adding script in Lightning Salesforce App I have got this error "Content Security Policy"

Question

When I am adding script in Lightning Salesforce App. I have got this error given below

Error :

Content Security Policy: The page's settings blocked the loading of a resource at https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js ("script-src https://bappi--davidtest.lightning.force.com chrome-extension: 'unsafe-eval' 'unsafe-inline' ).

Please provide your suggestion.

Answer 1

Better option is download https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js this js file upload into static resource

and use ltng:require for load static resource. once static resource loaded acll your init function from afterScriptsLoaded

<ltng:require scripts="/resource/resourceName" afterScriptsLoaded="{!c.init}" />

This will solve your problem

Answer 2

You may add the Javascript URL domain to CSP trusted Sites from Salesforce Setup.

For a step by step guide you can make use of the below link : https://developer.salesforce.com/docs/atlas.en-us.lightning.meta/lightning/csp_trusted_sites.htm

Thanks