Skip to main content

Shopify integration

Shopify has strict website security that by default prevents usage of widget technologies like ours.

There are generally two ways to resolve it. Either through direct contact with Shopify customer support or through platforms like Cloudflare if your website utilizes it.

Shopify customer support​

We generally do not recommend this because Shopify supposedly removes the security measures completely, rather than relaxing them a little.

More context can be found here.

Modifying Shopify response headers other ways​

Default Shopify response headers that are causing the issues with our widget is the following:​

content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

x-frame-options: DENY

Examples of proper configuration and ways to change them can be found under website configuration requirements