Enhancing Website Security with Content Security Policy (CSP)
We are committed to ensuring the highest levels of security and performance for our websites. As part of our ongoing efforts to enhance our security measures, we will be implementing a Content Security Policy (CSP) on GovernmentJobs, SchoolJobs and Career pages.
What is Content Security Policy (CSP)?
Content Security Policy (CSP) is a security measure designed to protect our website from various types of online threats, such as Cross-Site Scripting (XSS) and data injection attacks. It allows us to control which resources (like scripts, stylesheets, and images) can be loaded and executed on our web pages.
Why Are We Making This Change?
Implementing CSP helps us to:
- Prevent malicious content from being loaded onto sites.
- Enhance the overall security of websites.
- Ensure a safer browsing experience for visitors.
What Does This Mean for You?
Starting October 1, 2024, you will no longer be able to embed Career pages within your site using iframes. This change is necessary to protect your site and your users from potential security risks associated with third-party content.
Not Sure If You Are Using iframe?
Take a look at the image below to check if your site uses iframes. If your website or any department-specific pages resemble this layout, it indicates the use of iframes.
What Should You Do?
If your website currently uses iframes to display content from Career pages, they will stop working on October 1, 2024.This also applies to the department career pages so please check if your departments are using iframes on their department-specific sites. We recommend to update your site to link directly to NEOGOV's career page.
We understand that this change may require some adjustments, and our support team is here to help you through this transition. If you have any questions or need assistance, please don't hesitate to contact us.