Title: fix(csp): allow X (Twitter) conversion pixel domains on hosted by waleedlatif1 · Pull Request #5804 · simstudioai/sim · GitHub
Open Graph Title: fix(csp): allow X (Twitter) conversion pixel domains on hosted by waleedlatif1 · Pull Request #5804 · simstudioai/sim
X Title: fix(csp): allow X (Twitter) conversion pixel domains on hosted by waleedlatif1 · Pull Request #5804 · simstudioai/sim
Description: Summary The X (Twitter) conversion pixel injected on hosted landing pages tries to load uwt.js from static.ads-twitter.com, but that domain isn't in the CSP script-src, so the browser blocks it — the pixel never loads and every landing pageview logs a CSP violation. Add https://static.ads-twitter.com to script-src so uwt.js loads. Add https://analytics.twitter.com to connect-src so the pixel's conversion beacons (fetch/sendBeacon) can fire. The t.co image-pixel fallback is already covered by the https: wildcard in img-src. Both additions are gated behind isHosted, matching where the pixel