CSP for Paperform: Copy-Paste Policies That Actually Work
Paperform is easy to embed and easy to break with a bad CSP. If you run a locked-down site and drop in a Paperform embed, you’ll usually hit one of these: the iframe refuses to load form assets get blocked custom scripts around the embed stop working submissions fail because connect-src is too strict your own site can’t frame Paperform because frame-src is missing This guide is the practical version: what to allow, when to allow it, and copy-paste policies you can start with. ...