As part of ongoing security improvements, Content Security Policy (CSP) response headers are now present on all browser requests. This will impact Customizations and Integrations that load content from third-party/external sites outside of the main PowerSchool SIS address.A new {{cdn_request}} plugin.xml attribute has been added for Customizations and Integrations that require content from third-party sites to define external servers that the customization and/or integration will access. This attribute is present in PowerSchool SIS 21.11.0.0 and greater, which is the minimum supported version starting August 15th.Customizations and/or Integrations that utilize external content inside PowerSchool SIS will need to be updated by the issuer.Documentation for the cdn_request attribute can be found on the PowerSchool Developer site. The previous link may return a blank page if you are not currently logged into PowerSource.
New Security Policy