https://csp-guide.com/tags/sanity/ Recent content in Sanity on CSP Guide Hugo -- gohugo.io en-us Wed, 29 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-sanity-io-and-headless-content/ Wed, 29 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-sanity-io-and-headless-content/ <p>If you use Sanity.io as a headless CMS, your CSP usually breaks in the same places:</p> <ul> <li>Sanity image CDN</li> <li>Sanity API requests</li> <li>live preview or draft content</li> <li>embedded content coming from editors</li> <li>Studio hosting on a separate origin</li> <li>frontend frameworks that sneak in inline scripts</li> </ul> <p>I’ve had to fix this more than once, and the main trap is assuming “headless” means your CSP can stay simple. It rarely does. Content comes from one place, images from another, previews from another, and editors eventually paste in a YouTube embed that blows up your policy.</p>