Hi all. I'm trying to fix a Content Security Policy issue on a Power Apps Vibe code app.
This app was previously functioning normally until yesterday. My app needs to call two external services (an API and an AWS S3 bucket for images), and these are getting blocked. I noted the change in CSP settings in Janurary and noted that the setting to enforce was toggled 'on'.
I went into the Power Platform admin center and added both addresses to the allowed list (the "connect-src" setting), saved it, and republished the app. But the app is still blocking those calls - it's like my changes never took effect.
I waited over 24 hours in case it just needed time to update, and republished a few more times. Still no change.
To check if the problem was on my end, I used a Powershell script to look directly at what's configured, (not just what the admin center page shows me). That confirmed my settings are saved correctly - both web addresses are there, exactly as I added them. So the settings are saved properly, but something isn't using them when the app actually runs.
Ive even disabled the Enforce content security policy toggle entirely, to no avail. Ive confirmed the environment is correct etc.
Happy to provide additional information if required. Thanks in advance!
Hi all. I'm trying to fix a Content Security Policy issue on a Power Apps Vibe code app.
This app was previously functioning normally until yesterday. My app needs to call two external services (an API and an AWS S3 bucket for images), and these are getting blocked. I noted the change in CSP settings in Janurary and noted that the setting to enforce was toggled 'on'.
I went into the Power Platform admin center and added both addresses to the allowed list (the "connect-src" setting), saved it, and republished the app. But the app is still blocking those calls - it's like my changes never took effect.
I waited over 24 hours in case it just needed time to update, and republished a few more times. Still no change.
To check if the problem was on my end, I used a Powershell script to look directly at what's configured, (not just what the admin center page shows me). That confirmed my settings are saved correctly - both web addresses are there, exactly as I added them. So the settings are saved properly, but something isn't using them when the app actually runs.
Ive even disabled the Enforce content security policy toggle entirely, to no avail. Ive confirmed the environment is correct etc.
Happy to provide additional information if required. Thanks in advance!