Add own CSP headers

support
1

I am using the standard Docker based install. In our template we need to include Adobe Tag Manager which is loaded from assets.adobedtm.com. The default CSP headers prevent loading of the script.

How can I add or extend the default CSP headers in a “supported” non-hacky way?

2

Is

  • not using CSP by Discourse
  • using CSP via reverse proxy or similar

hacky way?

1 Like
3

I just need to know how I can add it e.g. during build of the container to be able to automate it…

4

Do you mean “content security policy script src” in site settings?

2 Likes
5

Yes!

And how can I amend e.g. connect-src or other attributes of the policy?

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.