CSP configuration
Content Security Policy (CSP) is an added layer of security that helps detect and mitigate certain types of attacks on websites. It essentially specifies from which domains the browser is allowed to load resources. More information: Content Security Policy (CSP)
Access to the following domains are required for CookieHub to function correctly:
- cookiehub.net
- ds.cookiehub.net
- consent.cookiehub.net
- static.cookiehub.com
If you have CSP enabled on your website and are currently using CookieHub, or planning to do so, you should add the following to your CSP configuration:
Content-Security-Policy: script-src cookiehub.net static.cookiehub.com; style-src cookiehub.net static.cookiehub.com; connect-src ds.cookiehub.net consent.cookiehub.net cookiehub.net
If you have enabled the EU only storage, a different CSP configuration is required:
Content-Security-Policy: script-src cdn.cookiehub.eu; style-src cdn.cookiehub.eu; connect-src region-eu.cookiehub.net consent-eu.cookiehub.net