Solved

Session replay feature

  • 28 August 2023
  • 3 replies
  • 101 views

Badge +1

I recently enabled the session replay feature in our product.  Though we have enabled the CSP-nonce support for the scripts loaded via heapanalytics.com , the below scripts loaded directly from auryc.com are failing to load with a status (blocked:csp) .

  1. https://client-api.auryc.com/releasesettings?lib=Web
  2. https://client-api.auryc.com/siteconfig?lib=web
  3. https://mt.auryc.com/v1/event

Is there a way for you folks to load the scripts from auryc.com using heapanalytics FQDN or subdomain?

icon

Best answer by Rohin-Heap 29 August 2023, 05:10

View original

3 replies

Userlevel 3
Badge +3

Hi @jay! Sorry to hear that’s happening. Are you able to open a support case via the Get support page?

Userlevel 2
Badge +1

Hello Jay,

We are working on integrating the scripts to come from the Heap Domain as we tightly knit the two platforms but currently it is coming from auryc and will be that way.  I’ll go ahead and file this with our product team to take a closer look.

 

This does mean if you want Session Replay to work as intended, you’ll have to add those domains to the CSP.  Here’s the documentation for doing so and let us know if you have any other questions! 

Badge +1

adding  connect-src 'self' *.auryc.com resolved the issue. Thanks.

Reply