3

I'm not sure what has changed in Experience Cloud but suddenly I'm getting CSP errors for some images that I'm linking to in an HTML component. I'm struggling to resolve these errors and get the images to display because:

  1. In Settings -> Security & Privacy -> CSP Errors, there are no errors listed for me to Whitelist a URL or approve the resource.
  2. I've added the image base URL to the CSP trusted sites, and it has no effect on resolving the CSP issues

What is extra strange is that these steps DID work in Production, but it isn't working in Sandbox. I thought maybe it was because sandbox URLs were recently changed to include "sandbox" in it, but my image URLs are referencing Production resources so they wouldn't have been affected.

Has anyone faced these stubborn CSP errors in a sandbox before or have any ideas on how to resolve them permanently?

The CSP Error

enter image description here

The broken images as a result of the CSP error:

enter image description here

I don't see any CSP errors to approve/resolve in the Settings & Privacy area???

enter image description here

I have tried adding the URL to the CSP Trusted Sites

enter image description here

1
  • Any luck on on resolving this issue? My team is running into the same and followed the same steps as you. Commented Jan 24 at 22:36

1 Answer 1

0

I had a similar issue where the Blocked URI was https://www.google.com/... and the CSP directive was connect-src

  • Yet, I had a CSP entry for https://www.google.com with that directive checked.

My resolution was to open the browser developer tools - Console tab, and I could see the blocked content. SFDC was reporting the incorrect URI for the error. The true, blocked URI for me was: https://googleads.g.doubleclick.net

Adding that to the Trusted Sites resolved the issue. Of course, often when adding a new Trusted Site, Experience Builder then comes back with the need to add more trusted sites once one is unblocked.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .