# I am getting this on console

**URL:** <https://discuss.dev.twitch.com/t/i-am-getting-this-on-console/36893>\
**Category:** API\
**Created:** [February 17, 2022, 8:42am UTC](https://discuss.dev.twitch.com/t/i-am-getting-this-on-console/36893 "2022-02-17T08:42:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![v.agar](https://avatars.discourse-cdn.com/v4/letter/v/59ef9b/32.png) [@v.agar](https://discuss.dev.twitch.com/u/v.agar)\
**Post date:** [February 17, 2022, 8:42am UTC](https://discuss.dev.twitch.com/t/i-am-getting-this-on-console/36893/1 "2022-02-17T08:42:58Z")

</div>

Does anyone knows why I am getting this:  
Refused to connect to ‘[https://t07s3dgqyh.execute-api.eu-west-3.amazonaws.com/prod/](https://t07s3dgqyh.execute-api.eu-west-3.amazonaws.com/prod/)’ because it violates the following Content Security Policy directive: “connect-src ‘self’ [https://v43pkn899k05ln9niwv1unxwx0b96h.ext-twitch.tv](https://v43pkn899k05ln9niwv1unxwx0b96h.ext-twitch.tv) [https://api.twitch.tv](https://api.twitch.tv) wss://pubsub-edge.twitch.tv [https://www.google-analytics.com](https://www.google-analytics.com) [https://stats.g.doubleclick.net](https://stats.g.doubleclick.net)”.

when I am sending data from twitch using ajax and receiving a response to `show in the themplate using innerHTML?

---

<div class="post-metadata">

**Author:** ![BarryCarlyon](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://discuss.dev.twitch.com/u/BarryCarlyon)\
**Post date:** [February 17, 2022, 12:13pm UTC](https://discuss.dev.twitch.com/t/i-am-getting-this-on-console/36893/2 "2022-02-17T12:13:58Z")

</div>

> [@New Extensions policy for Content Security Policy (CSP) directives and timeline for enforcement](https://discuss.dev.twitch.com/t/new-extensions-policy-for-content-security-policy-csp-directives-and-timeline-for-enforcement/33695):
>
> Update (2022-01-24) In order to minimize disruption and accommodate recent Extension reviews, we have made a few updates to how and when the CSP policy will be enforced this week. The CSP enforcement date has been moved by two days to Thursday, January 27 and should begin sometime between 11am-12pm PST. If you have submitted an Extension review request before January 25 at 12pm PST, your Extension will continue to function without the new CSP enforcement until the review has been completed. W…

The URL `https://t07s3dgqyh.execute-api.eu-west-3.amazonaws.com` is not in your Connect SRC CSP rule

See the capabilities tab for your extension to add/update.

---

<div class="post-metadata">

**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\
**Post date:** [March 19, 2022, 12:14pm UTC](https://discuss.dev.twitch.com/t/i-am-getting-this-on-console/36893/3 "2022-03-19T12:14:12Z")

</div>

Closed on March 19, 2022, 12:14pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.