Content Security Policy (CSP) Whitelist

To ensure the seamless functionality of the Vida Web SDK, update your Content Security Policy (CSP) whitelist to allow the following scripts and resources:

This table provides a clear view of the URLs and their purposes for your CSP whitelist.

URL	Purpose
https://web-sdk.vida.id	Used for downloading the Vida SDK code itself.
https://cdn.jsdelivr.net	Used for downloading Mediapipe WebAssembly files (e.g., link).
https://storage.googleapis.com	Used for downloading Mediapipe face landmark models (e.g., link).
https://www.datadoghq-browser-agent.com	Used to download the Datadog RUM SDK for logging errors or crashes (e.g., link).

Example CSP Update

Make sure these domains are added to your CSP directives, such as script-src and connect-src:

Content-Security-Policy: 
script-src 'self' https://web-sdk.vida.id https://cdn.jsdelivr.net https://storage.googleapis.com https://www.datadoghq-browser-agent.com; 
connect-src 'self' https://web-sdk.vida.id https://cdn.jsdelivr.net https://storage.googleapis.com https://www.datadoghq-browser-agent.com;

By adding these URLs to your CSP configuration, you ensure that the SDK and its dependencies load and function correctly.