---
title: Restricted CSS expressions
description: Restricted CSS expressions in the Custom CSS field of Web consent notices
---

[Skip to content](https://support.didomi.io/restricted-css-expressions#main-content)

- [English](https://support.didomi.io/restricted-css-expressions)
- [Français](https://support.didomi.io/fr/propriétés-css-restreintes)

English

Show submenu for translations

[Customer portal](https://support.didomi.io/tickets-view)

![Didomi SAS](https://support.didomi.io/hs-fs/hubfs/Didomi-tail-name.png?width=182&height=34&name=Didomi-tail-name.png)

Open main navigation

Close main navigation

- - [English](https://support.didomi.io/restricted-css-expressions)
    - [Français](https://support.didomi.io/fr/propriétés-css-restreintes)

  English
  
  Show submenu for translations
- [Customer portal](https://support.didomi.io/tickets-view)
- Go to didomi.io

 Go to didomi.io

 Our documentation has moved to docs.didomi.io. Please update any bookmarks.

- There are no suggestions because the search field is empty.

1. [Help Center](https://support.didomi.io/)
2. [FAQ](https://support.didomi.io/faq)
3. [Customization](https://support.didomi.io/faq#customization)

# Restricted CSS expressions

## Restricted CSS expressions in the Custom CSS field of Web consent notices

### ⚙️ What CSS expressions are not allowed in custom CSS?

When configuring custom CSS on your consent notice from the Didomi Console, the following expressions are not allowed:

- *url()*
- *@import()*
- *@charset()*
- *expression()*
- *-moz-binding*
- *javascript*

If one of the listed expressions is used, the Console will prevent you from saving or publishing your consent notice and an error message will be displayed.  
You will not be able to save or publish your consent notice until you remove the expression that is not allowed.

 

⚙️ Why are CSS expressions not allowed?

We restrict the acceptable CSS expressions in custom CSS for security reasons.

Expressions that load external resources or execute JavaScript can be used to execute code on a webpage. To ensure that the Didomi Console cannot be used for cross-site scripting (XSS), those expressions are blocked.

If you absolutely need those expressions for your custom CSS, you can set them directly on your website and not through the Didomi Console.

- [Consent notice creation](https://support.didomi.io/consent-notice-creation#main-content)

    - [Basics](https://support.didomi.io/consent-notice-creation#basics)
    - [Consent notice per device](https://support.didomi.io/consent-notice-creation#consent-notice-per-device)
    - [Manage Vendors and Purposes](https://support.didomi.io/consent-notice-creation#manage-vendors-and-purposes)
    - [Customization](https://support.didomi.io/consent-notice-creation#customization)
    - [Multi-regulations](https://support.didomi.io/consent-notice-creation#multi-regulations)
    - [Frameworks](https://support.didomi.io/consent-notice-creation#frameworks)
    - [Integrations](https://support.didomi.io/consent-notice-creation#integrations)
    - [Console migration](https://support.didomi.io/consent-notice-creation#console-migration)
    - [IAB GPP Framework](https://support.didomi.io/consent-notice-creation#iab-gpp-framework)
    - [Accessibility](https://support.didomi.io/consent-notice-creation#accessibility)
- [Compliance report](https://support.didomi.io/compliance-report#main-content)

    - [CMP Vendor Sync](https://support.didomi.io/compliance-report#cmp-vendor-sync)
    - [Advanced Compliance Monitoring](https://support.didomi.io/compliance-report#advanced-compliance-monitoring)
- [Preference Management Platform](https://support.didomi.io/preference-management-platform#main-content)

    - [Configuration Tree](https://support.didomi.io/preference-management-platform#configuration-tree)
    - [Widget](https://support.didomi.io/preference-management-platform#widget)
    - [Deployment](https://support.didomi.io/preference-management-platform#deployment)
- [Google integrations](https://support.didomi.io/google-integrations)
- [Privacy Request](https://support.didomi.io/privacy-request#main-content)

    - [User Requests](https://support.didomi.io/privacy-request#user-requests)
    - [Widgets](https://support.didomi.io/privacy-request#widgets)
- [IAB TCF](https://support.didomi.io/iab-tcf#main-content)

    - [Google & TCF](https://support.didomi.io/iab-tcf#google-tcf)
    - [TCFv2 Presentation](https://support.didomi.io/iab-tcf#tcfv2-presentation)
    - [TCF v2.2](https://support.didomi.io/iab-tcf#tcf-v2-2)
- [Analytics](https://support.didomi.io/analytics#main-content)

    - [Consent Management Platform (CMP) Analytics](https://support.didomi.io/analytics#consent-management-platform-cmp-analytics)
    - [Preference Management Platform (PMP) Analytics](https://support.didomi.io/analytics#preference-management-platform-pmp-analytics)
    - [ACM (Advance Compliance Monitoring)](https://support.didomi.io/analytics#acm-advance-compliance-monitoring)
- [Integrations](https://support.didomi.io/integrations#main-content)

    - [AB testing](https://support.didomi.io/integrations#ab-testing)
    - [Paywalls](https://support.didomi.io/integrations#paywalls)
    - [CMS](https://support.didomi.io/integrations#cms)
    - [Generic integrations](https://support.didomi.io/integrations#generic-integrations)
    - [Marketing automation](https://support.didomi.io/integrations#marketing-automation)
    - [Customer Data Platform (CDP)](https://support.didomi.io/integrations#customer-data-platform-cdp)
    - [CRM](https://support.didomi.io/integrations#crm)
- [Lexicon](https://support.didomi.io/lexicon)
- [Legal Requirements](https://support.didomi.io/legal-requirements#main-content)

    - [Didomi SDK compliance](https://support.didomi.io/legal-requirements#didomi-sdk-compliance)
- [Privacy Center and Data Processing](https://support.didomi.io/privacy-center-and-data-processing)
- [FAQ](https://support.didomi.io/faq#main-content)

    - [CMP / Managing tags](https://support.didomi.io/faq#cmp-managing-tags)
    - [CMP / Data Privacy for publishers](https://support.didomi.io/faq#cmp-data-privacy-for-publishers)
    - [CMP / Implementing a consent notice](https://support.didomi.io/faq#cmp-implementing-a-consent-notice)
    - [Debugging](https://support.didomi.io/faq#debugging)
    - [CMP / CPRA](https://support.didomi.io/faq#cmp-cpra)
    - [CMP / Analytics](https://support.didomi.io/faq#cmp-analytics)
    - [PMP](https://support.didomi.io/faq#pmp)
    - [Share consent](https://support.didomi.io/faq#share-consent)
    - [Customization](https://support.didomi.io/faq#customization)
    - [Cookies](https://support.didomi.io/faq#cookies)
    - [IAB](https://support.didomi.io/faq#iab)
- [Versions & Proofs](https://support.didomi.io/versions-proofs)
- [Login & Security](https://support.didomi.io/login-security#main-content)

    - [SSO](https://support.didomi.io/login-security#sso)
    - [Users, Teams and Permissions](https://support.didomi.io/login-security#users-teams-and-permissions)
- [Privacy Hub widget](https://support.didomi.io/privacy-hub-widget)
- [Consent Notices (old flow)](https://support.didomi.io/consent-notices-old-flow)
- [Consent Notices (NEW FLOW)](https://support.didomi.io/consent-notices-new-flow)
- [Customer Portal - Tickets](https://support.didomi.io/customer-portal-tickets)
- [Organization settings](https://support.didomi.io/organization-settings)
- [SDK version control](https://support.didomi.io/sdk-version-control)

Didomi, verb in ancient greek (δ‌‌ιδο‌μι): consent.

Copyright © 2026, Didomi SAS

Cookies