Is it just the specific endpoint I'm trying to access, am I doing something wrong, or does KA just block all access to external resources(which can't be the case as you can load google fonts and such). I'm trying to access the google dictionary API, but it says it violates the content security policy, and refuses to connect. Is there something I am doing wrong or should do to get around it.
I've no idea about programming. Haven't dealt with an API in my life but if you get that error, probably you're not the one doing things wrong. There are a lot of examples where KA blocks things in order to maintain safe the site. It might be concerning APIs, sounds or images among others.
pa_u_los is correct, they limit API requests to google fonts, cdn.js, and khan academy's own servers (if I remember correctly). You're right that they used to not be able to block specific sites, but since new website security came in (I think it's called CORS) they have very fine-grained control! :)
The other thing is you can't make anything besides GET requests (also CORS).
Please sign in to leave a comment.