Content Security Policy

If you have applied a content security policy (CSP) to your application, you may need to adjust your configuration for the TaxBit SDK to function correctly. Whether you need to make changes depends on the leniency of your CSP configuration.

The TaxBit SDK will make requests to TaxBit servers. It will also embed an iframe within your user interface and load iframe content from https://cdn.taxbit.com. Your CSP must have the following entries for these requests to work.

connect-src https://*.taxbit.com; 
iframe-src https://cdn.taxbit.com;