Skip to content

Latest commit

 

History

History
7 lines (5 loc) · 568 Bytes

ContentSecurityPolicy.md

File metadata and controls

7 lines (5 loc) · 568 Bytes
Raw

Content Security Policy

If you're using Content Security Policy (CSP) to mitigate potential impact from exploits such as XSS, you need to make sure the policy allows Splunk RUM:

  • If you use our CDN to load the agent make sure to allow script-src cdn.signalfx.com
    • Cases of self-hosting and npm installation should already be covered by your site, as otherwise interactivity on your site wouldn't work.
  • Add the host from beaconUrl value to connect-src, ie. connect-src app.us1.signalfx.com