Skip to content

Commit 6262702

Browse files
authored
Minor rewording
1 parent 145997a commit 6262702

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

src/connections/sources/catalog/libraries/website/javascript/troubleshooting.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -205,16 +205,16 @@ The Analytics.js library sets the `context.page.referrer` value from the `window
205205

206206
## Does Segment support using strict Content Security Policy (CSP) on the page?
207207

208-
If you are using a nonce-based security policy that allows JavaScript to be downloaded from specific locations, then you will need to update the CSP to account for all Segment domains. Therefore, beyond allowing the main `analytics.min.js` script, you should also allow the following paths in your CSP:
208+
If you're using a security policy that allows JavaScript downloads from specific locations using nonces, then you'll need to update the CSP to include all Segment domains. In addition to allowing the main `analytics.min.js` script, you should also allow the following paths in your CSP:
209209
- `https://cdn.segment.com/v1/projects/<WRITE_KEY>/settings`
210210
- `https://cdn.segment.com/analytics-next/bundles/*`
211211
- `https://cdn.segment.com/next-integrations/integrations/*`
212212

213-
Your CSP may also require whitelisting approved domains, in which case you'll want to allow the following endpoints:
213+
Your CSP may also require allowlisting approved domains, in which case you'll want to allow the following endpoints:
214214
- `api.segment.io`
215215
- `cdn.segment.com`
216216

217-
You will also need to modify the Segment script with your `nonce` tag, which should match the value specified in your Content Security Policy.
217+
You'll also need to modify the Segment script with your `nonce` tag, which should match the value specified in your Content Security Policy.
218218

219219
> info ""
220220
> Since Segment interacts with several integrations, support surrounding Content Security Policy issues is limited.

0 commit comments

Comments
 (0)