Content Security Policy

🚧

This page is marked as deprecated, but Taxbit will continue supporting customers currently using these solutions. If you’d like to learn more about upgrading to our new React SDK with enhanced Digital W8/W9 support, reach out to our team today.

If you have applied a content security policy (CSP) to your application, you may need to adjust your configuration for the TaxBit SDK to function correctly. Whether you need to make changes depends on the leniency of your CSP configuration.

The TaxBit SDK will make requests to TaxBit servers. It will also embed an iframe within your user interface and load iframe content from https://cdn.taxbit.com. Your CSP must have the following entries for these requests to work.

connect-src https://*.taxbit.com; 
iframe-src https://cdn.taxbit.com;