Updating your HCL Leap – Mind the Content Security Policy

We installed HCL Leap in 2024 as a replacement for the old community surveys. At that time, version 9.3.6 was the supported release. Later updates of HCL Connections gradually added support for newer Leap versions: Connections 8.0 CR9 → Leap 9.3.8 Connections 8.0 CR12 → Leap 9.3.10 Connections 8.0 CR14 (expected) → Leap 9.3.12 Since our installation worked fine, we initially saw no reason to upgrade. That changed about six months ago when we encountered a user-identity issue.
This is a companion discussion topic for the original entry at https://blog.martdj.nl/2026/03/09/updating-your-hcl-leap-mind-the-content-security-policy/