{"id":3361,"date":"2025-04-16T07:18:46","date_gmt":"2025-04-16T07:18:46","guid":{"rendered":"https:\/\/www.skybridgeinfotech.com\/blog\/?p=3361"},"modified":"2025-06-24T10:40:22","modified_gmt":"2025-06-24T10:40:22","slug":"content-security-policy-in-sitecore","status":"publish","type":"post","link":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/","title":{"rendered":"Content Security Policy in Sitecore"},"content":{"rendered":"\n

Content Security Policy in Sitecore<\/strong><\/strong><\/strong><\/h2>\n\n\n\n

Did you hear your website is failed on the content audit before it is going live? Mentioning that the implementation has the incorrect or missing Content security policy domains. Basically, Content security policy is helps to prevent or minimize from certain types of threats. <\/p>\n\n\n\n

What is CSP and it is purpose?<\/strong><\/p>\n\n\n\n

As per the https:\/\/content-security-policy.com\/<\/a> the CSP is the name of a Http response header that modern browser use to enhance the security of the document or a web page.<\/p>\n\n\n\n

The main purpose of the CSP is to prevent XSS (Cross Site Scripting) attacks and it is preventing to load the unauthorize or harmful content your website. Cross site scripting is basically to attack the website by using the script injections from another domain and CSP (Content Security Policy) is define that which domain should be allowed to what type of the content on the document or a website.<\/p>\n\n\n\n

By chance the CSS or JS is hosted on the external website like CDN\u2019s and those CDN hosts should be listed under some directives like default – src. There are more directives are there will see details in the below,<\/p>\n\n\n\n

Directives<\/strong><\/td>Purposes<\/strong><\/td><\/tr>
default-src<\/td>It defines the default policy to fetching resources such as JavaScript, CSS, fonts, AJAX requests, Frames, HTML5 Media.<\/td><\/tr>
script-src<\/td>This directive is used to define the JavaScript resources.<\/td><\/tr>
style-src<\/td>This directive is used to obtain the CSS resources.<\/td><\/tr>
img-src<\/td>This directive is used to obtain the external images.<\/td><\/tr>
connect-src<\/td>It helps define the AJAX, WebSocket, fetch() event sources.<\/td><\/tr>
font-src<\/td>This directive supports fonts sources.<\/td><\/tr>
media-src<\/td>This directive is used to obtain the source of audio and videos.<\/td><\/tr>
frame-src<\/td>It helps to load the valid iframes on the document or a website.<\/td><\/tr><\/tbody><\/table>
The expressions are the key to instruct the directive which means based on this expression the directive resources will be react on the website.<\/figcaption><\/figure>\n\n\n\n
Source expression<\/strong><\/th>Purpose<\/strong><\/th><\/tr><\/thead>
\u2018self\u2019<\/td>It allows to load the resources only from the host origin.<\/td><\/tr>
\u2018unsafe-inline\u2019<\/td>It allows to use the style, onclick attributes or inline scripts in the website<\/td><\/tr>
\u2018unsafe-eval\u2019<\/td>It allows to use the script functions function (), eval (), setTimeout () which commonly used on the scripts.<\/td><\/tr>
\u2018none\u2019<\/td>It will prevent to load the resources from the directives.<\/td><\/tr>
\u2018*\u2019<\/td>Allows all resources from the directives.<\/td><\/tr><\/tbody><\/table>
Content Security Policy Examples and Validations<\/strong>

Examples:<\/strong>
default-src \u2018self\u2019 <\/em>It allows everything from the same origin of the website.
script-src \u2018self\u2019 <\/em>It allows scripts from the same origin of the website.
script-src \u2018self\u2019 <\/em>www.google – analytics.com<\/em><\/a> It allows script from the google analytics and same origin.

Validations:<\/strong>

Refused to load the script ‘script-uri’ because it violates the following Content Security Policy directive: “your CSP directive”.<\/em>
This error message when the content security policy doesn\u2019t match with define policy for the website and the error messages may vary with different browser but message is the same. Let say if other than the mentioned origin script is try to load on the website it will through above error.

Ways to implement the CSP<\/strong>

There are multiple ways to implement the Content Security Policy for the website here I am trying to explain the with .Net or event Sitecore.

In the .Net or Sitecore projects the simplest way to implement the CSP is Web.config file, the implementation is below like this,<\/figcaption><\/figure>\n\n\n\n

<httpProtocol><\/strong><\/em><\/p>\n\n\n\n

  <customHeaders><\/em><\/p>\n\n\n\n

    <remove name=”X-Powered-By” \/><\/em><\/p>\n\n\n\n

    <remove name=”X-Content-Type-Options”\/><\/em><\/p>\n\n\n\n

    <remove name=”X-XSS-Protection”\/><\/em><\/p>\n\n\n\n

    <remove name=”Content-Security-Policy”\/><\/em><\/p>\n\n\n\n

    <add name=”X-XSS-Protection” value=”1; mode=block”\/><\/em><\/p>\n\n\n\n

    <add name=”X-Content-Type-Options” value=”nosniff “\/><\/em><\/p>\n\n\n\n

    <add name=”Content-Security-Policy” value=”default-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’ https:\/\/apps.sitecore.net; script-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’ https:\/\/www.googletagmanager.com https:\/\/www.google-analytics.com https:\/\/www.buzzsprout.com; img-src ‘self’ data: https:\/\/assets.buzzsprout.com https:\/\/bat.bing.com; style-src ‘self’ ‘unsafe-inline’ https:\/\/fonts.googleapis.com https:\/\/cloud.typenetwork.com https:\/\/assets.buzzsprout.com; font-src ‘self’ ‘unsafe-inline’ https:\/\/fonts.gstatic.com https:\/\/cloud.typenetwork.com; child-src ‘self’ ‘unsafe-inline’ https:\/\/player.brightcove.net https:\/\/www.buzzsprout.com; upgrade-insecure-requests;  block-all-mixed-content;”\/>   <\/em><\/p>\n\n\n\n

  <\/customHeaders><\/em><\/p>\n\n\n\n

<\/httpProtocol><\/em><\/p>\n\n\n\n

Other ways to implement the CSP by programmatically that I will explain in detail with upcoming blog series.<\/p>\n\n\n\n

Conclusion<\/strong><\/p>\n\n\n\n

The Content Security Policy is helps to protect the website from the attacks and more of security purposes this CSP is common thing for the for the all public websites to make the website safe and secure. There are pros and cons of the CSP implementations each one has it\u2019s own purpose and let\u2019s discuss this in a upcoming blog series.<\/p>\n\n\n\n

Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).<\/p>\n","protected":false},"excerpt":{"rendered":"

Content Security Policy in Sitecore Did you hear your website is failed on the content audit before it is going […]<\/p>\n","protected":false},"author":1,"featured_media":3413,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"blog-details.php","format":"standard","meta":{"_acf_changed":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[91,872],"tags":[],"acf":[],"yoast_head":"\r\nContent Security Policies In Sitecore - Skybridge Infotech USA India<\/title>\r\n<meta name=\"description\" content=\"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).\" \/>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_US\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"Content Security Policies in Sitecore - Skybridge Infotech USA India\" \/>\r\n<meta property=\"og:description\" content=\"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\" \/>\r\n<meta property=\"og:site_name\" content=\"Skybridge\" \/>\r\n<meta property=\"article:published_time\" content=\"2025-04-16T07:18:46+00:00\" \/>\r\n<meta property=\"article:modified_time\" content=\"2025-06-24T10:40:22+00:00\" \/>\r\n<meta property=\"og:image\" content=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\" \/>\r\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\r\n\t<meta property=\"og:image:height\" content=\"800\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\r\n<meta name=\"author\" content=\"admin\" \/>\r\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\r\n<meta name=\"twitter:title\" content=\"Content Security Policies in Sitecore - Skybridge Infotech USA India\" \/>\r\n<meta name=\"twitter:description\" content=\"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).\" \/>\r\n<meta name=\"twitter:image\" content=\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc\"},\"headline\":\"Content Security Policy in Sitecore\",\"datePublished\":\"2025-04-16T07:18:46+00:00\",\"dateModified\":\"2025-06-24T10:40:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\"},\"wordCount\":815,\"publisher\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\",\"articleSection\":[\"Web Design and Development\",\"Web Development\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\",\"name\":\"Content Security Policies In Sitecore - Skybridge Infotech USA India\",\"isPartOf\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\",\"datePublished\":\"2025-04-16T07:18:46+00:00\",\"dateModified\":\"2025-06-24T10:40:22+00:00\",\"description\":\"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).\",\"breadcrumb\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\",\"contentUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png\",\"width\":1200,\"height\":800,\"caption\":\"Content Security Policies In Sitecore - Skybridge Infotech USA India\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Content Security Policy in Sitecore\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#website\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\",\"name\":\"Skybridge\",\"description\":\"Skybridge\",\"publisher\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.skybridgeinfotech.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\",\"name\":\"Skybridge\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png\",\"contentUrl\":\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png\",\"width\":197,\"height\":73,\"caption\":\"Skybridge\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/www.skybridgeinfotech.com\/blog\"],\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/author\/admin\/\"}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Content Security Policies In Sitecore - Skybridge Infotech USA India","description":"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/","og_locale":"en_US","og_type":"article","og_title":"Content Security Policies in Sitecore - Skybridge Infotech USA India","og_description":"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).","og_url":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/","og_site_name":"Skybridge","article_published_time":"2025-04-16T07:18:46+00:00","article_modified_time":"2025-06-24T10:40:22+00:00","og_image":[{"width":1200,"height":800,"url":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"Content Security Policies in Sitecore - Skybridge Infotech USA India","twitter_description":"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).","twitter_image":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#article","isPartOf":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/"},"author":{"name":"admin","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc"},"headline":"Content Security Policy in Sitecore","datePublished":"2025-04-16T07:18:46+00:00","dateModified":"2025-06-24T10:40:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/"},"wordCount":815,"publisher":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","articleSection":["Web Design and Development","Web Development"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/","url":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/","name":"Content Security Policies In Sitecore - Skybridge Infotech USA India","isPartOf":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","datePublished":"2025-04-16T07:18:46+00:00","dateModified":"2025-06-24T10:40:22+00:00","description":"Skybridge Infotech, a Sitecore Certified Implementation Partner, emphasizes robust security practices in their Sitecore projects, including the implementation of Content Security Policies (CSP).","breadcrumb":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#primaryimage","url":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","contentUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2025\/06\/9_Content-Security-Policy-in-Sitecore.png","width":1200,"height":800,"caption":"Content Security Policies In Sitecore - Skybridge Infotech USA India"},{"@type":"BreadcrumbList","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/content-security-policy-in-sitecore\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.skybridgeinfotech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Content Security Policy in Sitecore"}]},{"@type":"WebSite","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#website","url":"https:\/\/www.skybridgeinfotech.com\/blog\/","name":"Skybridge","description":"Skybridge","publisher":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.skybridgeinfotech.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization","name":"Skybridge","url":"https:\/\/www.skybridgeinfotech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/","url":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png","contentUrl":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png","width":197,"height":73,"caption":"Skybridge"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/www.skybridgeinfotech.com\/blog"],"url":"https:\/\/www.skybridgeinfotech.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/3361"}],"collection":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/comments?post=3361"}],"version-history":[{"count":6,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/3361\/revisions"}],"predecessor-version":[{"id":3370,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/3361\/revisions\/3370"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/media\/3413"}],"wp:attachment":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/media?parent=3361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/categories?post=3361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/tags?post=3361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}