Badges
Accepted Solutions
Likes Received
Posts
Discussions
Ideas
Blog Posts
The CSP policy is set by the web server, and ours is quite locked down due to security constraints. I need to add an exception for every host being accessed from our web pages. I did see that {{Munchkin ID}}.mktoresp.com was being requested, but now also {{Munchkin ID}}.mktoutil.com, neither of whic...
Sorry for not being clear! It's Content Security Policy:https://en.wikipedia.org/wiki/Content_Security_PolicyWhich is a large industry standard to prevent cross-site scripting (XSS). It allows a host to restrict what other hosts can load scripts on that page. So for instance, if you want to load the...
Hi there, Does anyone have a comprehensive list of content security policy (CSP) rules for Munchkin tracking on a website? It's unclear from the documentation which hosts need to be included in order to make Munchkin work in production.I have included munchkin.marketo.net in the script-src block but...