Communities with embedded Twitter Feeds

[Johani (Joe)]

@aliyosefzai

Unchecking this option has any security risks ?

Yes, unchecking that setting is not recommended. CSP - content security policy - is on by default for very good reasons. If you need to whitelist some scripts that would normally be flagged by CSP, you can add them to the content_security_policy_script_src setting on your site and they would then work without issue. You can read

Mitigate XSS Attacks with Content Security Policy

What is Content Security Policy? Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware. – Content Security Policy (CSP) - HTTP | MDN XSS is still one of the most common web vulnerability – if someone else can run scripts on your site, it is not your site anymore…

if you want to learn more about this.