Allow-list guidance

For Digital Web to function correctly, the organization's Content Security Policy (CSP) needs to allow access to certain domains. This process is often referred to as allow-listing a domain. In cases where your CSP blocks inline styling an additional feature flag needs to be activated on the property.
Tip: It is only necessary to add these domains to any existing CSP directive
The domains to add to the CSP's allow list depends on the environment the Digital property is deployed on, and the features enabled for the property. To verify the details, please contact your Digital Expert.

Customers on Colo-EU properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.eu;
script-src*.kampyle.com *.medallia.eu;
frame-src*.kampyle.com *.medallia.eu;
font-src*.kampyle.com *.medallia.eu;
img-src*.kampyle.com *.medallia.eu;
style-src*.kampyle.com *.medallia.eu;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.eu https://ubt-lb.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.eu;
script-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.eu;
frame-srchttps://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.eu;
font-srchttps://resources.digital-cloud.medallia.eu https://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.eu https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud.medallia.eu;
style-srchttps://resources.digital-cloud.medallia.eu https://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on Colo-UK properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.eu;
script-src*.kampyle.com *.medallia.eu;
frame-src*.kampyle.com *.medallia.eu;
font-src*.kampyle.com *.medallia.eu;
img-src*.kampyle.com *.medallia.eu;
style-src*.kampyle.com *.medallia.eu;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://resources.digital-cloud-uk.medallia.eu https://ubt-lb.digital-cloud-uk.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-uk.medallia.eu;
script-srchttps://md-scp.kampyle.com https://resources.digital-cloud-uk.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-uk.medallia.eu;
frame-srchttps://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.com;
font-srchttps://resources.digital-cloud-uk.medallia.eu https://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://resources.digital-cloud-uk.medallia.eu https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-uk.medallia.eu;
style-srchttps://resources.digital-cloud-uk.medallia.eu https://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on Colo-US (SC4) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.com https://ubt-lb.digital-cloud.medallia.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.com;
script-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.com;
frame-srchttps://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.com;
font-srchttps://resources.digital-cloud.medallia.com https://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud.medallia.com;
style-srchttps://resources.digital-cloud.medallia.com https://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on Colo-US (West) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://resources.digital-cloud-west.medallia.com https://ubt-lb.digital-cloud-west.medallia.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-west.medallia.com;
script-srchttps://md-scp.kampyle.com https://resources.digital-cloud-west.medallia.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-west.medallia.com;
frame-srchttps://nebula-cdn.kampyle.com https://resources.digital-cloud-west.medallia.com;
font-srchttps://resources.digital-cloud-west.medallia.com https://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://resources.digital-cloud-west.medallia.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-west.medallia.com;
style-srchttps://resources.digital-cloud-west.medallia.com https://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on Colo-Canada properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.ca;
script-src*.kampyle.com *.medallia.ca;
frame-src*.kampyle.com *.medallia.ca;
font-src*.kampyle.com *.medallia.ca;
img-src*.kampyle.com *.medallia.ca;
style-src*.kampyle.com *.medallia.ca;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.ca https://ubt-lb.digital-cloud.medallia.ca https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.ca;
script-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.ca https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud.medallia.ca;
frame-srchttps://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.ca;
font-srchttps://resources.digital-cloud.medallia.ca https://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://resources.digital-cloud.medallia.ca https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud.medallia.ca;
style-srchttps://resources.digital-cloud.medallia.ca https://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on Singapore properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://ubt-lb.digital-cloud.medallia.com https://analytics-fe.digital-cloud-sin1.medallia.com;
script-srchttps://md-scp.kampyle.com https://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-sin1.medallia.com;
frame-srchttps://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com;
font-srchttps://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com;
img-srchttps://md-scp.kampyle.com https://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-sin1.medallia.com;
style-srchttps://md-scp.kampyle.com https://digital-cloud-sin1.medallia.com https://resources.digital-cloud-sin1.medallia.com;
base-urihttps://md-scp.kampyle.com;

Customers on PHX1 (OCI) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://ubt-lb.digital-cloud.medallia.com https://analytics-fe.digital-cloud-phx1.medallia.com;
script-srchttps://md-scp.kampyle.com https://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-phx1.medallia.com;
frame-srchttps://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com;
font-srchttps://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com;
img-srchttps://md-scp.kampyle.com https://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-phx1.medallia.com;
style-srchttps://md-scp.kampyle.com https://digital-cloud-phx1.medallia.com https://resources.digital-cloud-phx1.medallia.com;
base-urihttps://md-scp.kampyle.com;

Customers on JED1 (OCI) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-jed1.medallia.com;
script-srchttps://md-scp.kampyle.com https://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-jed1.medallia.com;
frame-srchttps://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com;
font-srchttps://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com;
img-srchttps://md-scp.kampyle.com https://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-jed1.medallia.com;
style-srchttps://md-scp.kampyle.com https://digital-cloud-jed1.medallia.com https://resources.digital-cloud-jed1.medallia.com;
base-urihttps://md-scp.kampyle.com;

Customers on HND1 (OCI) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://ubt-lb.digital-cloud.medallia.com https://analytics-fe.digital-cloud-hnd1.medallia.com;
script-srchttps://md-scp.kampyle.com https://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-hnd1.medallia.com;
frame-srchttps://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com;
font-srchttps://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com;
img-srchttps://md-scp.kampyle.com https://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-hnd1.medallia.com;
style-srchttps://md-scp.kampyle.com https://digital-cloud-hnd1.medallia.com https://resources.digital-cloud-hnd1.medallia.com;
base-urihttps://md-scp.kampyle.com;

Customers on ICN1 (OCI) properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://ubt-lb.digital-cloud.medallia.com https://analytics-fe.digital-cloud-icn1.medallia.com;
script-srchttps://md-scp.kampyle.com https://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com https://sbt-prod.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-icn1.medallia.com;
frame-srchttps://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com;
font-srchttps://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com;
img-srchttps://md-scp.kampyle.com https://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-icn1.medallia.com;
style-srchttps://md-scp.kampyle.com https://digital-cloud-icn1.medallia.com https://resources.digital-cloud-icn1.medallia.com;
base-urihttps://md-scp.kampyle.com;

Customers on AWS EU properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.eu;
script-src*.kampyle.com *.medallia.eu;
frame-src*.kampyle.com *.medallia.eu;
font-src*.kampyle.com *.medallia.eu;
img-src*.kampyle.com *.medallia.eu;
style-src*.kampyle.com *.medallia.eu;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-eu-main.medallia.eu;
script-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-eu-main.medallia.eu;
frame-srchttps://nebula-cdn.kampyle.com;
font-srchttps://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-eu-main.medallia.eu;
style-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on AWS US properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com;
script-src*.kampyle.com *.medallia.com;
frame-src*.kampyle.com *.medallia.com;
font-src*.kampyle.com *.medallia.com;
img-src*.kampyle.com *.medallia.com;
style-src*.kampyle.com *.medallia.com;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-us-main.medallia.com;
script-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-us-main.medallia.com;
frame-srchttps://nebula-cdn.kampyle.com;
font-srchttps://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-us-main.medallia.com;
style-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on AWS AU properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.com.au;
script-src*.kampyle.com *.medallia.com.au;
frame-src*.kampyle.com *.medallia.com.au;
font-src*.kampyle.com *.medallia.com.au;
img-src*.kampyle.com *.medallia.com.au;
style-src*.kampyle.com *.medallia.com.au;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-syd1.medallia.com.au;
script-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-syd1.medallia.com.au;
frame-srchttps://nebula-cdn.kampyle.com;
font-srchttps://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-syd1.medallia.com.au;
style-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;

Customers on AWS CA properties

For Digital surveys to function correctly on your website, your CSP should allow these domains:

connect-src*.kampyle.com *.medallia.ca;
script-src*.kampyle.com *.medallia.ca;
frame-src*.kampyle.com *.medallia.ca;
font-src*.kampyle.com *.medallia.ca;
img-src*.kampyle.com *.medallia.ca;
style-src*.kampyle.com *.medallia.ca;
base-uri*.kampyle.com;

If the CSP is not using wildcards, allow these domains:

connect-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-can-main.medallia.ca;
script-srchttps://md-scp.kampyle.com https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://analytics-fe.digital-cloud-can-main.medallia.ca;
frame-srchttps://nebula-cdn.kampyle.com;
font-srchttps://nebula-cdn.kampyle.com;
img-srchttps://md-scp.kampyle.com https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://analytics-fe.digital-cloud-can-main.medallia.ca;
style-srchttps://md-scp.kampyle.com https://nebula-cdn.kampyle.com;
base-urihttps://md-scp.kampyle.com;