Questions tagged [content-security-policy]

Filter by
Sorted by
Tagged with
1
vote
0answers
42 views

CORS Policy Error with Third Party Javascript Library

I'm trying to build my own Google Maps LWC. I understand and am aware that there is a native Lightning Map component, but I am wishing to build my own, and utilizing my own billing independent of ...
0
votes
0answers
43 views

Summer'20 Release - Salesforce Communities - CSP Error in Chrome

I have a Customer Community login page which is using a lightning aura component. Login page has a section where user enters username and password and logs in. After Summer'20 release, the section to ...
1
vote
1answer
31 views

Salesforce CSP site issue

Hi i have defined the few sites in the salesforce CSP settings but still i am getting the error as Refused to frame '' because it violates the following Content Security Policy directive all ...
2
votes
1answer
78 views

Communities Builder: Header Markup: adding communities url to script src tag? “Build Your Own” template

We recently created a new "Build Your Own" template community in our sandbox and we were adding our script snippets in the builder for our analytics tool (click the settings cog -> advanced -> edit ...
5
votes
1answer
4k views

Content security policy error while loading apex iframe

Issue: We get CSP (Content Security Policy) error with our Visualforce page integration. The issue is that when we access this in sandbox testing, we find that our content is wrapped in an iframe, ...
0
votes
0answers
102 views

CSP Whitelisting Not Working in Scratch Org

I'm adding Google's reCAPTCHA element to a Lightning component. Following Google's documentation, I added this JS snippet to the community in my scratch org: <script src="https://www.google.com/...
1
vote
1answer
51 views

Play .mov video from amazon in lightning

I want to play .mov video from amazon in lightning. Here is amazon presigned url: https://s3.us-east-1.amazonaws.com/zed-content/Activity%20Contents/test%20act%20Content/testVid47.MOV?X-Amz-...
2
votes
1answer
504 views

Lightning does not allow to download a video

Here is the error I am getting: zced__View_RPG_Flow:1 Refused to load media from 'https://archive.org/download/BigBuckBunny_124/Content/big_buck_bunny_720p_surround.mp4' because it violates the ...
1
vote
0answers
287 views

Lightning Component CSP - Meta tag http-equiv for TinyMCE

I have a lightning sub component within a larger component that uses TinyMCE js library locally to provide advanced editing capabilities. The component works when I disable LockerService, by setting ...
1
vote
0answers
227 views

Lightning Out Content Security Policy

I'm trying to use Lightning Out. It's running from within an iFrame, but I'm getting this error. Refused to load the script 'https://XXX.my.salesforce.com/lightning/lightning.out.js' because it ...
1
vote
0answers
290 views

Enabling CSP unsafe-eval support on other origins

I'm trying to build a component utilising lightning:component (external build) which has a dependency that loads code on init via a script tag. Specifically I'm trying to load content from https://...
2
votes
0answers
3k views

Soap webservice callout throws “Policy Falsifed” error : Error code 500

I am trying to make a web service call to an external system. The Gateway to the application server needs a soap signed request (WSS Security). The service provider confirmed authetication happens ...
2
votes
0answers
713 views

Frame Ancestors for Content Security Policy headers for Canvas App

I'm working on a canvas app. I need to prevent it from being iframed from unauthorized sources. The problem is I don't know what to set as the CSP frame-ancestors in the headers for my canvas app. It ...
2
votes
0answers
198 views

Sandbox Marketing Banner Blocked by Content Security Policy

I was logging in to the sandbox today and I noticed that instead of the usual marketing banner I got an error message saying: Blocked by Content Security Policy This page has a content security ...
0
votes
1answer
877 views

Display a page in an iframe from a diferent domain

I am trying to build a simple visualforce page with an iframe. my page: <apex:page> <apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/> </apex:page> ("...
2
votes
0answers
485 views

Salesforce Lightning App + Microsoft Edge + CSP

I am currently developing a Lightning Application and have predominately being using Google Chrome through the development process. I am now working to ensure that the application is supported across ...