Troubleshooting

Content security policy

If your page sets a content-security-policy header, you may encounter an error similar to one of these:

• Refused to load the script 'https://cdn.capture.dev/capture-js/browser/latest.js' because it violates the following Content Security Policy directive...
• Refused to frame 'https://app.capture.dev/widget/...' because it violates the following Content Security Policy directive...

To fix this, you will need to update your website's content security policy to enable the capture widget to be embedded on your page. Below is an example content security policy containing the correct directives for capture.dev:

script-src 'unsafe-inline' 'self' https://cdn.capture.dev; frame-src 'self' https://app.capture.dev;

Permissions policy

If your page sets a permissions-policy header, you may encounter an error similar to one of these:

• [Violation] Permissions policy violation: camera is not allowed in this document.
• [Violation] Permissions policy violation: microphone is not allowed in this document.
• [Violation] Permissions policy violation: The Clipboard API has been blocked because of a permissions policy applied to the current document
• [Violation] Permissions policy violation: display-capture is not allowed in this document.

To fix, update your permissions policy header to allow capture.dev to access these browser APIs. For example:

camera=(self "https://app.capture.dev"), display-capture=(self "https://app.capture.dev"), microphone=(self "https://app.capture.dev"), clipboard-write=(self "https://app.capture.dev")