We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [csp]

The Lightning Component framework uses Content Security Policy (CSP), which is a W3C standard, to control the source of content that can be loaded on a page. CSP is a Candidate Recommendation of the W3C working group on Web Application Security. The framework uses the Content-​Security-​Policy HTTP header recommended by the W3C.

Filter by
Sorted by
Tagged with
1
vote
1answer
85 views

CSP Issue when trying to bring in a React app to a lightning container

I have a simple aura component with a lightning container: <aura:component access="global" implements="flexipage:availableForAllPageTypes"> <lightning:container aura:id="ReactApp" src="{...
2
votes
0answers
65 views

Way to bypass CSP limitations

We store images of our customers in Google Drive. Way we merge data is by Rest API calls. Also, we provide our managers with custom lightning component with embeded links to the images. Unfortunately, ...
0
votes
1answer
206 views

Getting error while adding a trusted site

I am adding some markup in "Head Markup" section of Community Builder(Settings --> Advanced) that references resources from 3rd party websites. Thus, SFDC gives me CSP violation warning in the markup. ...
5
votes
1answer
118 views

CSP violation when trying to whitelist site

I'm going through the Build a Community with Knowledge and Chat module on trailhead and keep getting the same CSP violation when I try to whitelist the snap-in chat in the community builder. I have ...
0
votes
1answer
145 views

Adding 'self', 'unsafe-inline' and 'unsafe-eval' in manifest file of quip live app

I am creating an app which refers to Desmos graphical calculator api script. I have imported the script in my quip app directory. When I build my app and import it in my quip document it fails to load ...
0
votes
1answer
66 views

Showing youtube video tiles in Lightning web components

I am currently migrating a vf page into Lightning web component, the vf page used to show the youtube video tiles on the page. But when I am converting it into a LWC component then it is throwing ...
2
votes
0answers
90 views

Spring '19 changes to Lightning communities CSP and visualforce pages

Before Spring '19 we were relying on a Visualforce page included in an iframe inside a Lightning community to load static HTML content. That worked without any issue. It still does when the community ...
0
votes
1answer
149 views

Adding meta tab for CSP issues in lighting web component

I am using some MDN to load styles and fonts from google but in it is throwing error in the console. lwc_engine.js:6242 Refused to load the stylesheet 'https://www.google.com/recaptcha/api.js' ...
0
votes
0answers
46 views

Content security policy - Communities

As per latest Salesforce article : CSP It is mentioned : To ensure that your community works as expected, the default CSP setting (Allow Inline Scripts and Script Access to Any Third-party Host)...
4
votes
3answers
2k views

How to Use lightning Locker Service in sandbox

I know how to configure security model through OWD, Sharing Rules, Profiles and Roles in salesforce sandbox account but how to use Lightning Security Locker Service instead of OWD, Sharing Rules...etc ...
0
votes
2answers
1k views

Make HTTP POST request from Lightning Component

I want to make a post request to a server, using this code: ({ start : function(component, event, helper) { var xhr = new XMLHttpRequest(); var url = "https://site.com/service"; ...
2
votes
3answers
1k views

Content Security Policy (CSP) of lightning:container

I'm trying to add custom CSP as given in the link: https://developer.salesforce.com/docs/atlas.en-us.lightning.meta/lightning/container_csp.htm index.html <!DOCTYPE html> <html lang="en">...
0
votes
2answers
1k views

Lighting:container - Refused to load the script 'https://www.youtube.com/iframe_api' because it violates the following Content Security Policy

The below is a React Component that I'm loading from lightning:container import React, { Component } from 'react'; import Plyr from 'plyr'; import '../node_modules/plyr/dist/plyr.css'; import './App....
2
votes
1answer
938 views

New CSP violation spontainiously happening in lightning

I have some code in a visualforce page that used a custom js library to build an excel file client side from an object generated on the server side and then force the browser to download the file. ...
1
vote
0answers
260 views

Enabling CSP unsafe-eval support on other origins

I'm trying to build a component utilising lightning:component (external build) which has a dependency that loads code on init via a script tag. Specifically I'm trying to load content from https://...
0
votes
1answer
63 views

How Can I Integrate the Flickr API with a Lightning App?

I'm presently working my way through Learning JavaScript Design Patterns by Addy Osmani, and trying to figure out how I can make these patterns functional and/or useful in the Salesforce Aura/...