> ## Documentation Index
> Fetch the complete documentation index at: https://moengage.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Why Does Acquiring Web Opt-In Violate the Content Security Policy Directive?

> Fix the Content Security Policy error blocking web push opt-in by whitelisting the required MoEngage image URL in your CSP img-src directive.

## Problem

When the user tries to get web opt-in, the following error message is displayed on the browser's console:

"[https://www.moengage.com/img/icon-web-push.png](https://www.moengage.com/img/icon-web-push.png) because it violates the following Content Security Policy directive: "img-src assets.adobedtm.com amcglobal.sc.omtrdc.net".

<img src="https://mintcdn.com/moengage/rcvpxihxIp--_HSE/images/moengage_89237c.png?fit=max&auto=format&n=rcvpxihxIp--_HSE&q=85&s=05890b76b79aee53dc47be1db7805e7b" alt="1.png" width="2184" height="312" data-path="images/moengage_89237c.png" />

## Solution

Perform the following steps:

<Info>
  The issue occurs with the uploaded image icon for web opt-in.
</Info>

1. Ensure that you have the required access for the image uploaded.
2. Whitelist the URL  `<https://image.moengage.com/>` under the image-src directive in the Content Security Policy (CSP) on the customer's end. For more information, refer to [Whitelisting URLs](https://www.moengage.com/docs/developer-guide/web-sdk/web-sdk-integration/basic-integration/web-sdk-integration).