Content Security Policy for loading the Checkout page

Problem Statement

This article helps you understand content security policy for loading the checkout page.

Solution

The following is the CSP policy that you would need to add in your headers or meta tag:

style-src : https:// .chargebee.com/assets/hp_v3/iframe_views/

script-src : https://js.chargebee.com/v2/chargebee.js

frame-src : https:// .chargebee.com/

Since we have enabled CSP in 'Report Only' mode, please report only the errors that are a part of our iframe.