Stronger protection for your shop against outside scripts

Every shop now enforces a full Content Security Policy (CSP): the browser loads scripts, embedded frames and connections only from the services the shop actually relies on - payments (Stripe, Borica), Google Analytics and ads, the Meta pixel, YouTube and Vimeo video. A script from an unknown site simply does not run. There is nothing you need to change.