Trello Power-Up Manifest.json CSP Issue (Blocked by Content Security Policy)

[Kenan SARIMEŞE]

Hello Trello Support Team, I am developing a Trello Power-Up and hosting it on Vercel. However, when trying to load the `manifest.json` file from `https://trello-powerup-eight.vercel.app/manifest.json`, Trello blocks the request due to a Content Security Policy (CSP) restriction. ### Issue Details: - Error in browser console: **"Refused to connect to 'https://trello-powerup-eight.vercel.app/manifest.json' because it violates the Content Security Policy directive."** - The manifest file loads fine in a web browser, but Trello times out after 30 seconds. - I have tested this with different browsers and cleared the cache. - My `vercel.json` file already includes CORS and CSP headers. ### Questions: 1. **Does Trello block requests from `vercel.app` domains by default?** 2. **Is there a way to whitelist my domain or make it compatible with Trello's security policies?** 3. **Would moving to another hosting provider like GitHub Pages or Netlify resolve this issue?** I appreciate any guidance on this matter. Thank you in advance for your help! Best regards,

[Luciana Munhoz]

Hi Kenan! Welcome to Trello community!

I kindly recommend that you post your question in our Atlassian developer community.

In the dev community you'll be able to find many other users who develop integrations with Trello, and many of our developers are also there and can help you too.