> For the complete documentation index, see [llms.txt](https://docs.firework.com/firework-for-developers/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.firework.com/firework-for-developers/web/integration-guide/privacy-settings/content-security-policy.md).

# Content Security Policy

##

Refer: <https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy>

Those site can be added into default-src, of course can be added to other settings(for example connect-src or image-src) as well.

The hosts from firework:

```
https://p2.fwpixel.com
https://fireworkadservices1.com
https://fireworkanalytics.com
https://fireworkapi1.com
https://ig-importer.firework-prod.com

https://*.firework.com
https://*.fw-assets1.com
https://*.fwcdn1.com
https://*.fwcdn2.com
https://*.fwcdn3.com
https://*.fireworktv.com
https://*.fireworkn.com
https://*.fwbiz1.com
https://*.fwpub1.com
https://*.fwadcdn1.com

https://*.live-video.net
https://*.playback.live-video.net
https://*.global-contribute.live-video.net
https://*.us-west-2.playback.live-video.net
https://*.us-east-1.playback.live-video.net

https://*.agora.io
https://*.sd-rtn.com

https://*.execute-api.us-west-2.amazonaws.com
https://*.pixelsdata.com

wss://fireworkapi1.com:*
wss://*.agora.io:*
wss://*.sd-rtn.com:*

```