https://csp-guide.com/tags/hyvor-talk/ Recent content in Hyvor-Talk on CSP Guide Hugo -- gohugo.io en-us Mon, 27 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-hyvor-talk-comments/ Mon, 27 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-hyvor-talk-comments/ <p>I’ve seen this pattern a lot: a site has a reasonably tight Content Security Policy, then someone adds a third-party comments widget, and suddenly the console turns into a wall of CSP violations.</p> <p>That’s exactly what happens with Hyvor Talk if you drop in the embed code and hope your existing policy will “just work”.</p> <p>For a developer site like <code>csp-guide</code>, this is extra awkward. You want comments, but you also can’t publish a sloppy <code>script-src *</code> policy and call it a day.</p>