Description: Controls which endpoints your site can connect to (AJAX, APIs) via CSP connect-src (Pro).
How it works: builder_connect_src and builder_connect_mode define allowed origins for fetch/XHR/WebSocket connections.
How to access / configure:
- WP Admin → AegisShield → Security Headers → CSP Builder.
- Open Connect settings.
- Add API domains and Save Changes.
Recommended setting: Only allow your own domain and required external APIs (payments, analytics, etc.).
