When you enable Content Security Policy (CSP) and/or Cross-Origin Resource Sharing (CORS) within your Application Workspace zone, you need to add the URL of the portal to the security settings. If you do not add these, the Application Workspace widget will not be able to communicate with the Application Workspace Server.
Enable Content Security Policy (CSP)
To enable CSP:
1. Navigate to Manage > Portal > Security Settings.
2. On the Content Security Policy tab, enable Enforce the policy and/or Report violations and add the URL where CSP violation reports should be delivered.
3. Add the websites that are allowed to embed the Application Workspace zone.
Enable and Restrict Cross-Origin Resource Sharing (CORS)
To enable CORS with restrictions:
1. Navigate to Manage > Portal > Security Settings.
2. On the Cross-Origin Resource Sharing tab, enable Restrict cross origin authentication and add the websites you'll allow to authenticate against the Application Workspace zone.
