Questions tagged [content-security-policy]

Filter by
Sorted by
Tagged with
0
votes
0answers
36 views

Summer'20 Release - Salesforce Communities - CSP Error in Chrome

I have a Customer Community login page which is using a lightning aura component. Login page has a section where user enters username and password and logs in. After Summer'20 release, the section to ...
1
vote
1answer
29 views

Salesforce CSP site issue

Hi i have defined the few sites in the salesforce CSP settings but still i am getting the error as Refused to frame '' because it violates the following Content Security Policy directive all ...
2
votes
1answer
63 views

Communities Builder: Header Markup: adding communities url to script src tag? “Build Your Own” template

We recently created a new "Build Your Own" template community in our sandbox and we were adding our script snippets in the builder for our analytics tool (click the settings cog -> advanced -> edit ...
5
votes
1answer
4k views

Content security policy error while loading apex iframe

Issue: We get CSP (Content Security Policy) error with our Visualforce page integration. The issue is that when we access this in sandbox testing, we find that our content is wrapped in an iframe, ...
0
votes
0answers
96 views

CSP Whitelisting Not Working in Scratch Org

I'm adding Google's reCAPTCHA element to a Lightning component. Following Google's documentation, I added this JS snippet to the community in my scratch org: <script src="https://www.google.com/...
1
vote
1answer
48 views

Play .mov video from amazon in lightning

I want to play .mov video from amazon in lightning. Here is amazon presigned url: https://s3.us-east-1.amazonaws.com/zed-content/Activity%20Contents/test%20act%20Content/testVid47.MOV?X-Amz-...
2
votes
1answer
473 views

Lightning does not allow to download a video

Here is the error I am getting: zced__View_RPG_Flow:1 Refused to load media from 'https://archive.org/download/BigBuckBunny_124/Content/big_buck_bunny_720p_surround.mp4' because it violates the ...
1
vote
0answers
279 views

Lightning Component CSP - Meta tag http-equiv for TinyMCE

I have a lightning sub component within a larger component that uses TinyMCE js library locally to provide advanced editing capabilities. The component works when I disable LockerService, by setting ...
1
vote
0answers
226 views

Lightning Out Content Security Policy

I'm trying to use Lightning Out. It's running from within an iFrame, but I'm getting this error. Refused to load the script 'https://XXX.my.salesforce.com/lightning/lightning.out.js' because it ...
1
vote
0answers
286 views

Enabling CSP unsafe-eval support on other origins

I'm trying to build a component utilising lightning:component (external build) which has a dependency that loads code on init via a script tag. Specifically I'm trying to load content from https://...
2
votes
0answers
3k views

Soap webservice callout throws “Policy Falsifed” error : Error code 500

I am trying to make a web service call to an external system. The Gateway to the application server needs a soap signed request (WSS Security). The service provider confirmed authetication happens ...
2
votes
0answers
701 views

Frame Ancestors for Content Security Policy headers for Canvas App

I'm working on a canvas app. I need to prevent it from being iframed from unauthorized sources. The problem is I don't know what to set as the CSP frame-ancestors in the headers for my canvas app. It ...
2
votes
0answers
197 views

Sandbox Marketing Banner Blocked by Content Security Policy

I was logging in to the sandbox today and I noticed that instead of the usual marketing banner I got an error message saying: Blocked by Content Security Policy This page has a content security ...
0
votes
1answer
867 views

Display a page in an iframe from a diferent domain

I am trying to build a simple visualforce page with an iframe. my page: <apex:page> <apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/> </apex:page> ("...
2
votes
0answers
479 views

Salesforce Lightning App + Microsoft Edge + CSP

I am currently developing a Lightning Application and have predominately being using Google Chrome through the development process. I am now working to ensure that the application is supported across ...