Widget blocked by Content Security Policy

Allow the Maptera iframe in your Content Security Policy.

Last updated April 27, 2026

A strict Content Security Policy on your site can block the Maptera iframe. The fix is to allowlist Maptera in your frame-src directive.

Add this to your CSP header

Content-Security-Policy: frame-src https://maptera.switchlabs.dev;

Or, if you already have a frame-src directive, append to it:

frame-src https://maptera.switchlabs.dev https://your-existing-source.com;

WordPress: most security plugins (Wordfence, iThemes, Sucuri) add CSPs and have an allowlist UI in their settings
Shopify: the native Shopify embed handles this automatically, but third-party security apps can override it
Vercel/Netlify: edit the headers in your config file (vercel.json or _headers)

Was this article helpful?

Did this article miss your question?

Email our team and we will help directly.