https://csp-guide.com/tags/widgets/ Recent content in Widgets on CSP Guide Hugo -- gohugo.io en-us Wed, 08 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-calendly-booking-widget/ Wed, 08 Jul 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-calendly-booking-widget/ <p>Calendly is one of those embeds that looks simple until CSP gets involved. You paste their widget script, add a button or inline container, and suddenly the browser starts screaming about blocked frames, styles, and network requests.</p> <p>I’ve had to wire this up a few times, and the tricky part is not “make it work.” The tricky part is making it work <strong>without</strong> blowing a giant hole in your policy with <code>default-src *</code> or a lazy <code>script-src 'unsafe-inline' https:</code>.</p>