Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [content-security-policy]

The tag has no usage guidance.

2
votes
1answer
32 views

Content security policy error while loading apex iframe

Issue: We get CSP (Content Security Policy) error with our Visualforce page integration. The issue is that when we access this in sandbox testing, we find that our content is wrapped in an iframe, ...
0
votes
0answers
29 views

CSP Whitelisting Not Working in Scratch Org

I'm adding Google's reCAPTCHA element to a Lightning component. Following Google's documentation, I added this JS snippet to the community in my scratch org: <script src="https://www.google.com/...
1
vote
1answer
33 views

Play .mov video from amazon in lightning

I want to play .mov video from amazon in lightning. Here is amazon presigned url: https://s3.us-east-1.amazonaws.com/zed-content/Activity%20Contents/test%20act%20Content/testVid47.MOV?X-Amz-...
2
votes
1answer
172 views

Lightning does not allow to download a video

Here is the error I am getting: zced__View_RPG_Flow:1 Refused to load media from 'https://archive.org/download/BigBuckBunny_124/Content/big_buck_bunny_720p_surround.mp4' because it violates the ...
1
vote
0answers
178 views

Lightning Component CSP - Meta tag http-equiv for TinyMCE

I have a lightning sub component within a larger component that uses TinyMCE js library locally to provide advanced editing capabilities. The component works when I disable LockerService, by setting ...
1
vote
0answers
161 views

Lightning Out Content Security Policy

I'm trying to use Lightning Out. It's running from within an iFrame, but I'm getting this error. Refused to load the script 'https://XXX.my.salesforce.com/lightning/lightning.out.js' because it ...
1
vote
0answers
234 views

Enabling CSP unsafe-eval support on other origins

I'm trying to build a component utilising lightning:component (external build) which has a dependency that loads code on init via a script tag. Specifically I'm trying to load content from https://...
1
vote
0answers
1k views

Soap webservice callout throws “Policy Falsifed” error : Error code 500

I am trying to make a web service call to an external system. The Gateway to the application server needs a soap signed request (WSS Security). The service provider confirmed authetication happens ...
2
votes
0answers
473 views

Frame Ancestors for Content Security Policy headers for Canvas App

I'm working on a canvas app. I need to prevent it from being iframed from unauthorized sources. The problem is I don't know what to set as the CSP frame-ancestors in the headers for my canvas app. It ...
2
votes
0answers
149 views

Sandbox Marketing Banner Blocked by Content Security Policy

I was logging in to the sandbox today and I noticed that instead of the usual marketing banner I got an error message saying: Blocked by Content Security Policy This page has a content ...
0
votes
1answer
691 views

Display a page in an iframe from a diferent domain

I am trying to build a simple visualforce page with an iframe. my page: <apex:page> <apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/> </apex:page> ("...
2
votes
0answers
408 views

Salesforce Lightning App + Microsoft Edge + CSP

I am currently developing a Lightning Application and have predominately being using Google Chrome through the development process. I am now working to ensure that the application is supported across ...