How to add a content security policy

Search

How to add a content security policy

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft, to site defacement, to malware distribution.

You can add a Content Security Policy in Framer by setting a meta tag via custom code. The policy will be applied to everything after the tag so make sure you set it at the start of the head tag and always insert additional scripts after.

The meta tag has the exact same effect as setting the policy via site headers. You can find more information on the MDN site.