Content Security Policy

App Developers Developer APIs
1

Hello, I’m encountering a Content Security Policy (CSP) error on my Webflow site when using Vimeo’s player API.

The browser console shows: “[Report Only] Refused to load the script ‘https://f.vimeocdn.com/p/4.34.4/js/player.module.js’ because it violates the following Content Security Policy directive: ‘script-src ‘none’’.”

In the footer code of my Webflow project, I added my custom JavaScript.

The CSP is blocking my script.

How can I adjust the Content Security Policy in Webflow to load my scripts ?

Can you help me, please ?

2

Content Security Policy (CSP) - HTTP | MDN (mozilla.org)

TLDR: Requires a change to the server hosting the script. Check your implementation with the docs at Vimeo. Reach their support if needed.