# CORS and CSP

For browser integrations:

- allow required Zoom domains in CSP,
- avoid blocking SDK/script origins,
- validate iframe embedding and cross-origin constraints.

See:
- [Get Started](../get-started.md)
- [Get Started (official)](../references/get-started-official.md)