Guides
Content Security Policy
Allow the loader, iframe and API connection.
Required directives
script-src https://whazzup.io
frame-src https://whazzup.io
connect-src https://whazzup.ioStrict policies
Merge these hosts into your existing directives instead of replacing them. If scripts use nonces, allow the external loader URL according to your policy.