All Collections
FAQ
Security
Which domains does Survicate JavaScript connect with?
Which domains does Survicate JavaScript connect with?
Content Security Policy
Vlada avatar
Written by Vlada
Updated over a week ago

Content Security Policy (CSP) is a security standard introduced to prevent code injection attacks resulting from the execution of malicious content in the trusted web page context.

It can prevent Survicate from working on your website. If you use CSP and want surveys to display and gather data, please add the following to your CSP:

script-src 'unsafe-inline' https://survey.survicate.com https://surveys-static.survicate.com; 
style-src 'unsafe-inline';
font-src https://surveys-static.survicate.com;
img-src https://surveys-static.survicate.com https://assets.survicate.com https://res.cloudinary.com https://images.unsplash.com;
connect-src https://respondent.survicate.com;

Did this answer your question?