Content Security Policy

How it works

CSP (Content Security Policy) is a security feature that helps prevent malicious attacks like cross-site scripting (XSS). It does this by controlling the resources, such as scripts and images, that can be loaded and executed on a web page. To enforce these restrictions, CSP defines rules in HTTP headers or meta tags, limiting content sources and enhancing security.

For example, consider the following CSP directive:

Content-Security-Policy: default-src 'self'; script-src 'self' tealium.com;

• default-src instructs the visitor’s browser to only load resources from the same origin as the document unless additional directives set different policies for specific resource types.
• script-src instructs the visitor’s browser to load scripts only from the same origin as the document. It also allows scripts from tealium.com.

For each Tealium product or service you use, add its data center domains to your CSP. This ensures that your site visitors can load the necessary scripts. Also, add the domains of any vendors loaded through Tealium iQ Tag Management.

Each list includes all data center domains that may be used in the future.

For more information about CSP, see MSDN: Content Security Policy.

Tealium iQ Tag Management

Add the following iQ Tag Management data center domains to your CSP:

tags.tiqcdn.com
tags.tiqcdn.cn
tags-eu.tiqcdn.com

Tealium Collect Tag, AudienceStream and EventStream

Add the following Tealium Collect Tag, Tealium AudienceStream and Tealium EventStream data center domains to your CSP:

collect-ap-east-1.tealiumiq.com 
collect-ap-northeast-1.tealiumiq.com 
collect-ap-northeast-2.tealiumiq.com 
collect-ap-northeast-3.tealiumiq.com 
collect-ap-southeast-1.tealiumiq.com 
collect-ap-southeast-2.tealiumiq.com 
collect-ap-south-1.tealiumiq.com 
collect-ca-central-1.tealiumiq.com 
collect-eu-central-1.tealiumiq.com 
collect-eu-west-1.tealiumiq.com 
collect-eu-west-2.tealiumiq.com 
collect-eu-west-3.tealiumiq.com 
collect-sa-east-1.tealiumiq.com 
collect-us-east-1.tealiumiq.com 
collect-us-east-2.tealiumiq.com 
collect-us-west-1.tealiumiq.com 
collect-us-west-2.tealiumiq.com
collect.tealiumiq.com

Private cloud environments

If you use a private cloud environment, be sure to add that site to your CSP. For example, to add the PC HMT Collect environment, add the following domain:to your CSP:

pc-hmt-collect.tealiumiq.com

Data layer enrichment

Add the following Tealium Data Layer Enrichment data center domains to your CSP:

visitor-service-ap-northeast-1.tealiumiq.com 
visitor-service-ap-northeast-2.tealiumiq.com 
visitor-service-ap-northeast-3.tealiumiq.com 
visitor-service-ap-southeast-1.tealiumiq.com 
visitor-service-ap-southeast-2.tealiumiq.com 
visitor-service-ap-south-1.tealiumiq.com 
visitor-service-ca-central-1.tealiumiq.com 
visitor-service-eu-central-1.tealiumiq.com 
visitor-service-eu-west-1.tealiumiq.com 
visitor-service-eu-west-2.tealiumiq.com 
visitor-service-eu-west-3.tealiumiq.com 
visitor-service-sa-east-1.tealiumiq.com
visitor-service-us-east-1.tealiumiq.com 
visitor-service-us-east-2.tealiumiq.com 
visitor-service-us-west-1.tealiumiq.com 
visitor-service-us-west-2.tealiumiq.com
visitor-service.tealiumiq.com

Tealium API

Add the following Tealium API data center domain to your CSP:

api.tealiumiq.com