The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

How do I allow the Jira Service Widget with CSP without using unsafe-inline?

Kevin Johnson
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
July 26, 2024

I am trying to use the Service Management Widget (Contact Us button) on our websites but our content-security-policy (CSP) is blocking it. The only way to make this work is with setting the CSP with:

style-src 'self' 'unsafe-inline';

Is there another option to make this work? We will get flagged by security/pen tests if I were to set unsafe-inline.

Widget documentation: 

https://support.atlassian.com/jira-service-management-cloud/docs/embed-a-widget-onto-a-web-page/

0 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS
AUG Leaders

Atlassian Community Events