Manage CORS with the Salesforce Interactions SDK Launcher
The Salesforce Interactions SDK Launcher is a Google Chrome extension that supports launching the Marketing Cloud Personalization Visual Editor on any domain. You can install this extension from the Chrome Web Store.
If you have the legacy Evergage Visual Editor Chrome extension installed, you must disable it for the Salesforce Interactions SDK Launcher to work correctly.
Warning
Required HTTP Header Configuration
Content-Security-Policy
The value of the default-src directive must include 'https://cdn.evergage.com'.
If the policy includes the frame-ancestors directive, the value must include 'self'. (Generally, if this directive is in use, its value is set to none, which prevents the Visual Editor from framing in your page.)
X-Frame-Options
X-Frame-Options must be set to SAMEORIGIN which allows the page to be displayed within an <iframe>, provided that the parent/frame domains are of the same origin.
Some pages utilize other methods of blocking the loading of unknown resources. If your page restricts the loading of scripts or assets to specific domains in different ways, you must allowlist https://cdn.evergage.com.
Note
Chrome Settings
To ensure that the Salesforce Interactions SDK Launcher extension works correctly, check and configure the following extension and browser settings.
Access chrome://extensions on Google Chrome
Select Details on the Salesforce Interactions SDK Launcher tile