Content Security Policy (CSP)

To allow use of external APIs inside custom components in Limio, in General Settings, or in Inject Code, you need to add trusted host to your shop's Content Security Policy (CSP).

To do so, go to Settings > Allowed Hosts and add the New Host. Use a wildcard to set the domain more broadly (e.g. ).

You should only add hosts that you trust and review this list periodically to remove any unused services.

Screenshot_2021-06-16_at_16.32.42.png