Usercentrics CMP and Content Security Policy (CSP) – Usercentrics Support - EN

The Content Security Policy (CSP) is a security protocol that tells the browser where files may be loaded from.

Please note

The policy is meant to be controlled via the HTTP response header, which is sent back by the webserver that serves the application / webpage. Browsers also support control via a meta tag that can be placed in the <head> section of the page.

If your site uses CSP, the following sources must be included in all CSP directives (script-src, img-src, etc.) to ensure the Usercentrics CMP resources are not blocked: https://*.usercentrics.eu.

The following <meta> tag is an example of what a browser-side implementation of a CSP policy might look like:

<meta
  http-equiv="Content-Security-Policy"
  content="script-src https://*.usercentrics.eu
  'self'; connect-src 'self' https://*.usercentrics.eu; img-src 'self' https://*.usercentrics.eu;
  object-src 'self' https://*.usercentrics.eu;"
>

You can find more information about the CSP here, here, and here.