How to Whitelist Fibr in Your Website’s Content Security Policy (CSP)?
Last updated
Last updated
A content security policy (CSP) is an additional security feature that some websites have implemented. It allows website developers to have more control over the types of content and resources that are allowed to load on their websites.
Sometimes, a website's content security policy settings can prevent Fibr from performing certain actions, such as loading the website in the editor.
The fastest way to identify a content security policy (CSP) issue is to look for unexpected changes on your website. With Fibr, if the Fibr Studio Chrome extension keeps loading/crashing or the changes that you have published for a campaign don't get reflected on your website, it is then imperative that you check for CSP.
To confirm if CSP problems cause these issues, follow these steps:
Right-click on the page.
Select "Inspect" from the menu.
Click on the "Console" tab at the top of the developer tools window.
If there are any CSP-related errors, you'll likely see something similar to the following displayed in the console:
Important Note: If an existing content security policy (CSP) is in place, you should only add the necessary Fibr domains to that existing CSP. Do not create a new CSP to add the Fibr domains. Modifying the existing CSP is the appropriate approach here.
To solve these errors, you'll need to allow-list the following domains on your content security policy:
