Skip to content
LogoLogo

How to set a Content Security Policy

This guide shows you how to let the Picked SDK load its resources under a CSP.

Steps

Add the Picked domains to your policy.

As an HTTP header:

Content-Security-Policy: connect-src 'self' https://api.picked.app https://evnts.pckd.dev; img-src 'self' https://img.picked-content.com;

Or as a <meta> tag:

<meta
  http-equiv="Content-Security-Policy"
  content="connect-src 'self' https://api.picked.app https://evnts.pckd.dev; img-src 'self' https://img.picked-content.com;"
/>