I have researched this a bit and am familiar with the security reasoning, etc. But is has their been any method created for doing this yet? I have an anti-ad block script I would like to run and it’s suppose to be inserted prior to </body> and adding it to the theme yields nada. I assume the securit…

have you placed your js inside script tags in your < /body>?: <script type="text/javascript"> <<< JS >> </script>

Yes I have already put the script in on the Desktop version of </body>. <script type="text/javascript" charset="utf-8"> eval(function.... </script>

Hmm… well I see that a file WITH the script is being put in the footer via: <script src="[/theme-javascripts/854aca489ba48a598e9eefaa2e4e255ac2a445b7.js?__ws=mywebsite.com](https://mywebsite.com/theme-javascripts/854aca489ba48a598e9eefaa2e4e255ac2a445b7.js?__ws=mywebsite.com)"></script> Going to t…

Okay… so there is this exception/error in the JS console: Uncaught EvalError: Refused to evaluate a string as JavaScript because ‘unsafe-eval’ is not an allowed source of script in the following Content Security Policy directive: "script-src… So it there a way to make “eval” safe or authorize this…

[圖片] Jim_Starkweather: Uncaught EvalError: Refused to evaluate a string as JavaScript because ‘unsafe-eval’ is not an allowed source of script in the following Content Security Policy directive: "script-src… You can whitelist evals in the content security policy site setting, see Mitigate XSS…

关闭 body 前添加 Javascript 的任何批准方法？

支持

pmusaraj (Penar Musaraj) 2020年十一月5日 02:25 6

您可以在内容安全策略站点设置中允许 eval，请参阅使用内容安全策略减轻 XSS 攻击。

不过我们不推荐这样做，因为这会使您的网站面临安全漏洞。

話題		回覆	觀看
Need help with the content security policy Support	3	794	2020年五月16日
Add javascript to a theme component Development	4	1595	2020年六月17日
How to embed JavaScript script in front of ,</body> tag Development	7	776	2023年九月16日
BlockAdBlock inserted in the footer but not working Support	0	409	2021年五月20日
Javascript not working in customised areas Support	8	1177	2019年五月14日

关闭 body 前添加 Javascript 的任何批准方法？

相關主題