Re: recommended policy for Content Security Policy

Jay_Brown — Fri, 30 Jun 2023 15:43:06 GMT

Hi @dobak , In general, Content-Security-Policy is not something that Qlik has recommendations for. This is more of an environment hardening issue.

As part of best-effort, I can point you to the most relevant articles and discussions about this as there is some good info in there:

https://community.qlik.com/t5/Official-Support-Articles/What-is-CSP-Content-Security-Policy-and-How-does-it-Relate-to/ta-p/1710258
https://community.qlik.com/t5/Official-Support-Articles/How-to-add-additional-response-headers-in-Qlik-Sense/ta-p/1717563
https://community.qlik.com/t5/Security-Governance/Not-able-to-apply-Content-Security-Policy-on-Qliksense/td-p/1998893
https://community.qlik.com/t5/Official-Support-Articles/How-to-determine-string-policy-for-Content-Security-Policy/ta-p/1715491
https://support.qlik.com/articles/000069349

I will say that in the field, mistakes with this hardening can sometimes break access to the environment so it is recommended to fully research those implementations and test them in lower environments prior to deploying.

I hope that helps!

topic recommended policy for Content Security Policy in Management & Governance

recommended policy for Content Security Policy

Re: recommended policy for Content Security Policy