CSP for Brevo Forms: Copy-Paste Policies That Work
Brevo forms are one of those integrations that look simple until CSP blocks them in production. You paste a signup form, refresh the page, and suddenly the console fills with violations for script-src, connect-src, or frame-src. If your policy is already fairly strict, Brevo will almost always need explicit allowlisting. This guide is the practical version: what to add, what each directive is for, and a few copy-paste policies you can start from. ...