# Add javascript to a theme component

**URL:** <https://meta.discourse.org/t/add-javascript-to-a-theme-component/152480>\
**Category:** Development\
**Created:** [May 23, 2020, 7:36pm UTC](https://meta.discourse.org/t/add-javascript-to-a-theme-component/152480 "2020-05-23T19:36:57Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Amethi](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/amethi/32/88690_2.png) [@Amethi](https://meta.discourse.org/u/Amethi)\
**Post date:** [June 17, 2020, 12:10pm UTC](https://meta.discourse.org/t/add-javascript-to-a-theme-component/152480/3 "2020-06-17T12:10:41Z")

</div>

How did you use the JS in your component? I’m using the Versatile Banner component and want to add a button that calls my custom JS function. I’ve put in the head as you mention but get a CSP error:

`dev.londonbikers.com/:1 Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src https://dev.londonbikers.com/logs/ https://dev.londonbikers.com/sidekiq/ https://dev.londonbikers.com/mini-profiler-resources/ https://dev.londonbikers.com/assets/ https://dev.londonbikers.com/brotli_asset/ https://dev.londonbikers.com/extra-locales/ https://dev.londonbikers.com/highlight-js/ https://dev.londonbikers.com/javascripts/ https://dev.londonbikers.com/plugins/ https://dev.londonbikers.com/theme-javascripts/ https://dev.londonbikers.com/svg-sprite/". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.`

When calling my code via `onclick="NavigateToCustomLoginUrl('facebook')"` on a button.

---

_[View the full topic](https://meta.discourse.org/t/add-javascript-to-a-theme-component/152480)._