Issue
I need guidance on how to configure my Content Security Policy (CSP) to allow for the use of Sentry on my site.
Resolution
CSP configuration is highly dependent on your own site and what you are loading you can find general JavaScript instructions: https://docs.sentry.io/platforms/javascript/install/loader/#content-security-policy
Replay specific instructions: https://docs.sentry.io/platforms/javascript/session-replay/#content-security-policy-csp.
Note: Sentry also provides the ability to collect information on Content-Security-Policy (CSP) violations. Sentry can help manage Content-Security-Policy violations, CSP reports, Expect-CT, and HTTP Public Key Pinning (HPKP) failures. Read more about it here: https://docs.sentry.io/security-legal-pii/security/security-policy-reporting/