Activity Forums Salesforce® Discussions What is CSP Trusted site in sfdc?

  • Laveena

    Member
    September 13, 2019 at 11:37 AM

    Hi Saddam,

    The Lightning Component framework uses Content Security Policy (CSP) to impose restrictions on content. The main objective is to help prevent cross-site scripting (XSS) and other code injection attacks. To use third-party APIs that make requests to an external (non-Salesforce) server or to use a WebSocket connection, add a CSP Trusted Site.

    Thanks

     

  • [adinserter block='9']
  • Piyush

    Member
    September 16, 2019 at 5:16 AM

    Hi,

    Content Security Policy is enforced by adding an HTTP header with name “Content-Security-Policy” and defining a rule pattern. Based on the ruleset defined, the browser restricts the web page from downloading malicious content from unknown sources.

     

Log In to reply.

Popular Salesforce Blogs

Popular Salesforce Videos

Skip to toolbar