Into every page and every iframe within the same domain, the following two lines of html should be added.
ScreenMeet’s Co-browsing package uses AJAX requests as well as WebSockets which reach out to ScreenMeet’s servers to perform it’s functions therefore to facilitate this and maintain a high standard of web security it is required that ScreenMeet’s api domain is added to the Content-Security-Policy white list.
Content-Security-Policy: "connect-src 'self' https://*.screenmeet.com wss://*.screenmeet.com; img-src 'self' https://*.screenmeet.com; script-src-elem 'self' https://*.screenmeet.com;"
Starting a session
To start a session on a page containing the Cobrowse, create a session as an agent, you may use one of the following methods