
LWC | Call External APIs from JavaScript
The Lightning Component framework uses Content Security Policy (CSP), a W3C standard, to control and restrict content loaded on a page to prevent cross-site scripting and other code injection attacks. The default CSP policy does not allow API calls from JavaScript code. To make API calls, a remote site needs to be added as a CSP Trusted Site in the Salesforce org. The article also provides a step-by-step guide to add a CSP trusted site and make an API call from JavaScript code successfully.







