Troubleshooting
Snippet and CSP problems
Fix blocked scripts, config requests, event delivery, and iframe policy.
In browser developer tools, look for CSP console messages and failed requests to the script, config, heartbeat, or event endpoint. Allow the asset host in script-src and API host in connect-src, or switch to a complete first-party proxy.
With nonces or 'strict-dynamic', ensure the deployed tag is trusted. Clear site/CDN caches after changing headers. For the visual editor, also review frame-ancestors and X-Frame-Options; allowing scripts does not automatically allow iframe loading.