Skip to main content
Participant
May 10, 2024

report an issue we're encountering with our web application related to Content Security Policy (CSP

  • May 10, 2024
  • 2 replies
  • 462 views

Issue Description: We have implemented a CSP policy on our website to enhance security and protect against various types of attacks. However, we're experiencing a specific CSP violation related to framing content from 'https://quick-actions.express.adobe.com/'. The error message states:

 

Refused to frame 'https://quick-actions.express.adobe.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' staging.paraclete.ai".

Expected Behavior: We expect to be able to embed content from 'https://quick-actions.express.adobe.com/' within frames on our website without encountering CSP violations.

Steps Taken: We have reviewed our CSP policy and confirmed that it includes 'self' and 'staging.paraclete.ai' in the 'frame-ancestors' directive. Despite this, we're still encountering the aforementioned violation.

Request for Assistance: We kindly request your assistance in resolving this issue. Could you please provide guidance on how we can adjust our CSP policy or any other necessary steps to ensure that we can embed content from 'https://quick-actions.express.adobe.com/' within frames on our website securely and in compliance with CSP standards?

 

 

2 replies

Participant
December 19, 2024

Any updates?

ErinF
Community Manager
Community Manager
May 17, 2024

I did ask Engineering about this, and have been waiting for a response.