Salesforce Platform · Lightning Components3 tasks
Configure CSP Trusted Sites
Get external images, scripts and endpoints loading in Lightning pages by adding, correcting or removing CSP Trusted Sites and related Remote Site Settings.
Method
How MeshMesh does it
- Finds every CSP Trusted Site and Remote Site Setting tied to a given vendor and its domains.
- Deletes the entries. When a metadata deploy reported entries as deleted that still existed, it fell back to deleting the records directly.
- Verifies that the deletions took effect.
- When images fail to load, traces the cause to the trusted site's context setting. In one case the site was limited to Communities, and MeshMesh changed it to All.
- Confirms the change with an API query.
- When external photos are blocked by the Content Security Policy, adds trusted sites for the photo domains and checks that the images render on Person Account pages.
- On request, packages the cleanup as a reusable shell script that others can run.