I am adding some markup in "Head Markup" section of Community Builder(Settings --> Advanced) that references resources from 3rd party websites. Thus, SFDC gives me CSP violation warning in the markup. To resolve this I went to Settings --> Security --> Content Security Policy (CSP) and changed policy to:

Allow Inline Scripts and Script Access to White listed Third-party Hosts

And went on to add these sites in trusted sites. Then I whitelisted them inCSP Errors section.

However, there is this one site that is giving me error as shown below:

enter image description here

This site is coming in "CSP Error" section:

enter image description here

But when I click on whitelist button, nothing happens, the page refreshes and I get errors as:

enter image description here

I have also added these sites in Trusted sites in Salesforce org --> Settings --> Security Controls --> CSP Trusted Sites. But it is not working.

Any help appreciated.

1 Answer 1


at the moment there isn't any fix. You can find updates here: https://success.salesforce.com/issues_view?id=a1p3A000001FSlqQAG

BR, Simone.

  • This article talks about error that comes when we are using a lightning:map. Here I am not using one.
    – Sarang
    Commented May 2, 2019 at 8:59
  • Hi @Sarang try to add only domain instead of whole url (as follow without spaces) --> https:// www. googletagmanager. com Commented May 2, 2019 at 10:44
  • I did that but to no avail.
    – Sarang
    Commented May 7, 2019 at 9:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .