Checklist By Alvis
  • Checklist introduction
  • HubSpot Installation
  • Widget
    • Widget installation
    • Show or hide checklist on URL changes
    • Show checklist manually
    • Embed checklist on a page
    • Hide checklist launcher
    • API Callback Methods
  • Why my checklist isn't acting correctly?
  • Checklist item actions
    • URL action
  • Complete checklist items
  • Add images in item detail
  • Customize checklist location
  • Customize embedded checklist UI
    • Default Checklist Scss File
  • Content Security Policy
  • How to set up multiple checklists in sequential order
  • What happens when trial ends?
  • How to uninstall
Powered by GitBook
On this page

Was this helpful?

Content Security Policy

PreviousDefault Checklist Scss FileNextHow to set up multiple checklists in sequential order

Last updated 2 years ago

Was this helpful?

Content Security Policy () is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting () and data injection attacks. (Source: )

If you are using source allowlisting, use the following for Content Security Policy:

style-src:
  'unsafe-inline'
  https://fonts.googleapis.com
font-src:
  https://fonts.gstatic.com
connect-src:
  https://checklist.api.getalvis.com
child-src:
  https://onboarding-widget.getalvis.com
script-src:
  https://assets.getalvis.com

And, if you need to inject the script separately instead of including it in one of your scripts, you'll need to use nonce. (i.e. script-src 'nonce-rAnd0m' and <script nonce="rAnd0m">...)

If you cannot use the nonce method, you can only use the hash method.  1. Go to Dashboard, click the top right corner and click Install, then copy the installation script. 2. Paste into the place where you want to put the script. Then copy exactly what is between <script> and </script>, and put it into to generate the hash. 3. Add the generated hash to script-src. Also checkout how to .

CSP
XSS
Mozilla
https://report-uri.com/home/hash
use Intercom with Content Security Policy