Dear Developers,
Over the past week, many of you might have faced issues with the local simulation and testing of the app. We acknowledge the issue and have been actively working to provide a fix for the same.
Details of the issue:
When running the app locally withfdk run command and trying to render the app for Freshdesk SKUs with ?dev=true option in the query parameters, the app fails to render with the CORS error. The iframe API fails to render with error CORS errors triggered by CSP policies, which prevents placeholders from loading properly.
Scope of impact:
-
Affects: Freshdesk SKUs with blocking local simulation in the product pages. However, the custom app and in-development app workflows are intact and can be used without any blockers.
-
Not affected: Freshservice, Freshsales Suite, Freshcaller, and other SKUs.
Root Cause:
As part of recent product enhancements, the content security policy (CSP) was updated to stop rendering insecure content in the production account. This resulted in blocking the local scripts, as a result, the the FDK content running on http://localhost:10001 is being blocked
Resolution:
We are actively working towards restoring the CSP behavior to unblock users. The tentative timeline per our standard release process, is 20th April 2026. However, we are exploring options for a speedy release to fix this issue ASAP.
Temporary workaround:
Option 1: Upload your application as a custom app with the save and test option from the developer portal. This essentially stops the CSP error and allows you to perform the simulation and test the app with the ?dev=true parameter.
Option 2: As a temporary measure for local development, you can bypass CSP restrictions using this Disable content security policy Chrome extension. After installing and enabling this extension, it will bypass the CSP issue.
Note: Refresh your browser after adding the extension to ensure it works properly.
We appreciate your patience while this is being addressed. We’ll keep this thread updated with any progress or fixes.
Regards,
Team Freshworks