# Communities with embedded Twitter Feeds

**URL:** https://meta.discourse.org/t/communities-with-embedded-twitter-feeds/133962
**Category:** Support
**Created:** [November 20, 2019, 9:10pm UTC](https://meta.discourse.org/t/communities-with-embedded-twitter-feeds/133962 "2019-11-20T21:10:04Z")
**Posts on this page:** 1
**Showing post:** 24

<div class="post-metadata">

### Author: ![Johani](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/johani/32/176920_2.png) [@Johani](https://meta.discourse.org/u/Johani)
#### Post date: [December 15, 2019, 5:04pm UTC](https://meta.discourse.org/t/communities-with-embedded-twitter-feeds/133962/24 "2019-12-15T17:04:21Z")

</div>

> [@aliyosefzai](#):
>
> Unchecking this option has any security risks ?

Yes, unchecking that setting is not recommended. CSP - content security policy - is on by default for very good reasons. If you need to whitelist some scripts that would normally be flagged by CSP, you can add them to the `content_security_policy_script_src` setting on your site and they would then work without issue. You can read

> [@Mitigate XSS Attacks with Content Security Policy](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243):
>
> bookmark This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. person_raising_hand Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

if you want to learn more about this.

---

_[View the full topic](https://meta.discourse.org/t/communities-with-embedded-twitter-feeds/133962)._