Issue with Docusign JS for production embedded signing due to Content Security Policy

Question

Hello,

I’m getting the following error when trying to use Docusign JS for production embedded signing.

I have set the frameAncestors to be http://localhost:8080 and https://apps.docusign.com when calling the API to create the embedded signing view URL.

The same setup worked with the demo integration where the frameAncestors had https://apps-d.docusign.com.

Could you please help me resolve this issue?

Error Message:

Framing 'https://apps.docusign.com/' violates the following Content Security Policy directive: "frame-ancestors 'self' https://ca.docusign.net". The request has been blocked.

Byungjae.Chung · Answer

Hi ​@ED_JasonThe localhost origin can’t be used for the frameAncestors attribute in production, as you can see in the "3. Call EnvelopeViews:createRecipient" section of this page: https://developers.docusign.com/docs/esign-rest-api/esign101/concepts/embedding/docusign-js-embedded-reference/Please specify an origin other than localhost in the frameAncestors attribute, then try again.

Sign up

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.

Docusign Community

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.