Script Tags Transformed to Fetch Calls

Lightning Web Security (LWS) transforms <script> tags into fetch calls. LWS downloads the script to evaluate it in the sandbox.

To enable the fetch calls to succeed:

Configure the connected-src CSP directive on the Salesforce site where the component runs to allow access to the script resource server. See Manage Trusted URLs.
Configure the resource server with cross-origin resource sharing (CORS) to add the origin of the Salesforce site to its allowed origins list. The component can then access server resources.

Release Preview

This release is in preview. Features described here don't become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can't guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.