--- schema_version: "1" id: 4d59c7c3607f5c441412c6cc1bb1ddebe31f9fe2bdcc839bffeb48a2a5698338 title: Troubleshoot Enhanced Chat Setup collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/miaw_troubleshoot.md canonical_url: https://help.salesforce.com/s/articleView?id=service.miaw_troubleshoot.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: b9b95cafb1a352db2a3c7cd425115cb9b14648d6d3f945fb2834dd3f51f03f0a description: Respond to error messages you may encounter while setting up Enhanced Chat. products: - Service Cloud - Digital Engagement release: "264" --- # Troubleshoot Enhanced Chat Setup Respond to error messages you may encounter while setting up Enhanced Chat. ### Required Editions
View supported editions.
Checkmark This article applies to: Enhanced In-App Chat and Enhanced Web Chat channels
X icon This article doesn’t apply to: Enhanced WhatsApp, Enhanced Facebook Messenger, Standard and Enhanced SMS, Enhanced Apple Messages for Business, Enhanced LINE, and Bring Your Own Channel
Error Message Solution 
Refused to frame ‘<your 
ESW_[deploymentname] site>’ because an ancestor 
violates the following content security policy 
directive: “frame ancestors <your old domain> 
<your old subdomain>”

Change or add the domain that’s associated with your embedded service deployment.

  • Go to Setup | User Interface | Sites and Domains | Sites.
  • Select your site from the Site Label column. Your site is formatted as <ESW_[deploymentname]_[numbers]>.
  • Under Trusted Domains for Inline Frames, find the domain or subdomain that you’d like to change, and click Edit.
  • Save your changes.
 
 Access to XMLHttpRequest at 
'<your ESW_[deploymentname]_[numbers] site>' from 
directive: '<your domain>' has been blocked by CORS 
policy: No 'Access-Control-Allow-Origin' header is 
present on the requested resource.

Add your new domain to the CORS allowlist.

  • From Setup, enter CORS in the Quick Find box, and then select CORS.
  • Select New.
  • Enter an origin URL pattern.
  • Save your work.
 
Refused to load the script 
'<your ESW_[deploymentname]_[numbers]>/assets/js/
bootstrap.min.js' because it violates the 
following Content Security Policy directive: 
"scrtipt-src 'self ''unsafe-eval 'unsafe-inline'...". 
Note that 'script-src-elem' was not explicitly set, 
so 'script-src' is used as a fallback.

Add the ESW site as a trusted site within the Builder:

  • Go to Setup | Digital Experiences | All Sites.
  • Click Builder next to your experience cloud site.
  • Under Settings, click Security & Privacy, and go to the Content Security Policy (CSP) section.
  • Set Security level to Relaxed CSP: Permit Access to Inline Scripts and Allowed Hosts.
  • Click Add Trusted Site to add the CSP trusted site details.
  • Enter the name and URL of your esw site.
  • Activate the site and click Add Site.
  • Publish the site.

Add the ESW site as a Trusted URL in Setup:

  • Go to Setup | Security | Trusted URLs.
  • Click New Trusted URL.
  • Fill out the API Name and URL fields.
  • In the CSP Context field, select Experience Builder Sites.
  • Under CSP Directives, select frame-src (iframe content) and style-src (stylesheets).
  • Save your changes.
Placeholder icon appears instead of external image when using enhanced links.

If you are using a third-party site to host your image, the site domain must be added as a Trusted URL:

  • Go to Setup | | Security | | Trusted URLs.
  • Click New Trusted URL.
  • Fill out the API Name and URL fields.
  • In the CSP Context field, select All.
  • Under CSP Directives, select img-src (images).
  • Save your changes.