# Zoom Embedding Without React Web Workers

**URL:** <https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475>\
**Category:** Web\
**Created:** [July 7, 2020, 9:14pm UTC](https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475 "2020-07-07T21:14:59Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mlandels](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mlandels/32/11523_2.png) [@mlandels](https://devforum.zoom.us/u/mlandels)\
**Post date:** [July 7, 2020, 9:14pm UTC](https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475/1 "2020-07-07T21:14:59Z")

</div>

**Description**  
Hi! I am embedding Zoom CDN into a CRM portal (Salesforce) where I have whitelisted all the script tags Zoom needs. Whitelisting gives certain levels of CSP policies for those URLs, mainly “script-src”

One CSP Policy the portal does **not** allow is worker-src. This is problematic because the react-dom plugin used by zoom utilizes Web Workers which fails and causes a " **Join meeting timeout"** error from Zoom.

**HOWEVER** If I click “Retry” on that timeout message, the meeting will load without issue.

My question is: Is there a way to embed zoom, or load react-dom without web workers referenced by the plugin? It seems like there is some sort of fallback method that is called on retry.

**Error**  
Refused to create a worker from ‘blob:https://…’ because it violates the following Content Security Policy directive: "script-src ‘self’ ‘unsafe-eval’ ‘unsafe-inline’ (whitelisted urls here). Note that ‘worker-src’ was not explicitly set, so ‘script-src’ is used as a fallback.

**Which version?**  
1.7.7

**Screenshots**

 ![1](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/2/2d2d6dc03755b6779b3e8e213dce5fee6d653ef7.png)

**Smartphone (please complete the following information):**

- Device: Mac Laptop
- OS: High Sierra
- Version: 10.13.6
- Browser:Chrome

---

<div class="post-metadata">

**Author:** ![jpower](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jpower/32/11031_2.png) [@jpower](https://devforum.zoom.us/u/jpower)\
**Post date:** [July 8, 2020, 4:46pm UTC](https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475/2 "2020-07-08T16:46:03Z")

</div>

bump! Would love a response from zoom / an SDK guru.

We’d really love to integrate the SDK on salesforce, and we know there is some fallback mechanism behind the scenes if web-workers fail. Anyone able to help us out here?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [July 13, 2020, 6:35pm UTC](https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475/3 "2020-07-13T18:35:34Z")

</div>

Hey @jpower, @mlandels,

To fix this issue, please upgrade to at least Web SDK version 1.7.8:

> [@CORS issue while running locally on AngularJS](https://devforum.zoom.us/t/cors-issue-while-running-locally-on-angularjs/19980/4):
>
> Yes this issue was fixed in version 1.7.8! slight_smile Thanks, Tommy

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 10:40pm UTC](https://devforum.zoom.us/t/zoom-embedding-without-react-web-workers/23475/4 "2020-08-21T22:40:23Z")

</div>

Closed on August 21, 2020, 10:40pm UTC