The information in this thread might be outdated
If the solution did not help, please, check our Help Portal or contact Ecwid Team.
 
 
Thread Tools Display Modes
  #1  
Old 10-19-2017, 11:12 PM
Marc Cosgrove's Avatar
Marc Cosgrove is offline
 
Join Date: Dec 2014
Posts: 1
Default

Content-Security-Policy


Has anyone experience in setting content-security-policy tags for sites with embedded ecwid? I want to limit the possible sources for scripts, but the ecwid code seems to reference scripts with a variety of domains. I though that checking the headers on the native 'starter'site might help, but there appears to be no tags set.
Anyone know more?
  #2  
Old 10-21-2017, 05:07 PM
Alex Flint's Avatar
Alex Flint Alex Flint is offline
Ecwid Team
 
Join Date: May 2017
Posts: 106
Default

Hi Marc,

It's Alex Flint from Ecwid Customer Care Team. Thanks for reaching us out. I'm here to help you.

Please, let me first explain why there are several sources of transferring content of an Ecwid store to a website, where Ecwid is embedded.

The stability of Ecwid stores is one of our highest priorities. We do our best to keep your store up and running 24/7 without any downtimes. One of the common practices creating a stable platform is dividing the sources, that provide the content of an Ecwid store. This is the reason, why you see several domains that transfer Ecwid content to your website.

Sometimes, change domain names in order to make sure, that our merchants' stores won't be down affected by any domain outages. And, unfortunately, due to such actions, it is not possible to restrict the domains, that provide your website with content for a page, where Ecwid is integrated — I'm sorry.

However, I'd like to tell you, that Ecwid is a highly-secured platform. All the data, that is transferred within your store is encrypted and no one has the access to one. You can learn more on the topic in our article on Customer Data Security in Ecwid

Hope I was helpful. If you have any questions — please, feel free to ask.
 
The information in this thread might be outdated
If the solution did not help, please, check our Help Portal or contact Ecwid Team.

Tags
content-security-policy, htaccess

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:07 PM.
Powered by vBulletin® Version 3.8.11. Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.