CSP for Crisp Chat Widget: Copy-Paste Policy Examples
Crisp is easy to drop into a site. Getting it past a strict Content Security Policy is where people usually lose an afternoon. The widget loads scripts, opens network connections, pulls images and fonts, and may embed frames depending on what features you enable. If your CSP is tight — and it should be — you need to explicitly allow what Crisp uses without blowing a hole in the rest of the policy. ...