Content Security Policy (CSP)

Content Security Policy (CSP) 

Schools may have a Content Security Policy (CSP) to ensure the content they display on their webpages is authorized. 

Schools will need to involve the person(s) who edit the CSP webpage settings.  It will be important to understand how the CSP is currently configured.

Schools that utilize a restrictive CSP will want to include some additional coding in the CSP header so that the virtual assistant, live assistant, two-way messaging, and other features from Ocelot will function successfully. Without adding Ocelot information to an existing/restrictive CSP, content from Ocelot may be blocked and not fully rendered. In these cases, the webpage may not properly load all items and errors can occur.  See the below section for examples of the types of errors that may occur with the CSP definitions that need attention.

If the school has a CSP, please have the person(s) responsible for the school's webpages review the information below. Please review any existing CSP and add the following settings to the existing CSP headers:

Virtual Assistant

With CSP settings, the embedding of content will display correctly.

• Without CSP authorization,  videos in a virtual assistant's response may not display and be able to play.  
• Without CSP authorization, a "Refuse to frame 'https://embed.ocelotbot.com/" error can occur because it violates any CSP directive.
• Without CSP authorization, the virtual assistant will not provide an automatic content generated response 

Live Assistant

In order for the Live Assistant to work effectively, your security configuration must permit WebSocket access to Ocelot's server. 

• Make sure the following is added to your CSP headers: connect-src: wss://ai.ocelotbot.com
• In general, live agents should have a stable network connection to ensure a smooth experience when using the Live Assistant. 
  
  

To see how your system is performing, you may want to run a Twilio Network Test. 

Any issues will be highlighted in red. If all areas pass but you're still having trouble diagnosing any problems, please submit an Ocelot Support Ticket.