In order to whitelist the Blue Triangle Service in your CSP, there are a few domains you'll need to add. Firstly, since our service only uses one domain (btttag.com) the easiest way to do this would be to add a hostname wildcard, i.e.:
The above syntax used in your CSP will cover all of the requests made to and from Blue Triangle.
Now if you'd like to be more specific you can instead specify the fully qualified domain names that we use. Those would be as follows:
The primary domains we use are customer_id.btttag.com, d.btttag.com and d3.btttag.com. However, we may use the others for load balancing and other purposes, so it's important to include all of these domains in your CSP.
The customer_id hostname is going to be unique to each site in your account. Your customer_id is the "Tag Prefix" listed in the Site Settings page in the Blue Triangle portal. Note only Account Admin permission may view this page.
Note: We do not recommend specifying file names in your CSP, which is why we have not listed ours here. Specifying each possible domain and file name combination for each service on your site requires far too many entries in your CSP thus it is not recommended and not feasible to maintain.
If you have any further questions, please add a comment below, contact us here, or send an email to firstname.lastname@example.org and we'll be happy to help.
Please sign in to leave a comment.