Adding Hosts to the Content Security Policy (CSP)

To allow use of external APIs inside custom components in Limio, in General Settings, or in Inject Code, you need to add trusted host to your shop's Content Security Policy (CSP).

To do so, go to Settings > Allowed Hosts and add the New Host. Use a wildcart to set the domain (e.g.

https://*.limio.com). You should only add hosts that you trust and review this list periodically to remove any unused services.