Skip to main content
Content Security Policy

This article explains how to resolve checkout errors caused by Content Security Policy settings blocking Kustom’s domain.

Updated over a week ago

If your checkout page displays the message "Something went wrong", it may be due to Kustom’s domain not being allowed under your Content Security Policy (CSP) settings.

How to allow Kustom’s domain

To resolve this issue, ensure that *.kustom.co is included in your CSP configuration.

If the issue persists, please contact Kustom Support.

What is a CSP?

Content Security Policy (CSP) is a security feature that helps prevent unauthorized scripts and resources from loading on a webpage. It controls which domains are allowed to provide content, such as scripts, images, or styles.

If a required domain is not included in the CSP settings, certain functions - such as Kustom’s checkout - may not work correctly. Updating the CSP configuration ensures that necessary resources are allowed to load.

The Content Security Policy is managed from the server-side configuration of a website.

Did this answer your question?