# Posso adicionar um trecho ao cabeçalho?

**URL:** https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242
**Category:** Support
**Created:** [Fevereiro 6, 2023, 4:42pm UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242 "2023-02-06T16:42:44Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![dafegosa](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dafegosa/32/292270_2.png) [@dafegosa](https://meta.discourse.org/u/dafegosa)
#### Post date: [Fevereiro 6, 2023, 4:42pm UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/1 "2023-02-06T16:42:44Z")

</div>

Olá, quero instalar o Pendo ([pendo.io](http://pendo.io) - analytics)  
Procurei informações mas não consegui encontrar.

Alguém poderia me ajudar?

---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [Fevereiro 6, 2023, 8:42pm UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/2 "2023-02-06T20:42:28Z")

</div>

Bem-vindo Daniel! 👋

Eu não conheço o Pendo, mas se for apenas um trecho de JavaScript que precisa ser adicionado, você deve conseguir adicioná-lo no painel de administração do seu Discourse:  
Personalizar → Temas (ou Componentes, que pode ser mais prático para criar um novo se o seu fórum tiver vários temas) → Editar CSS/HTML → aba `Head`.

Me diga se o Pendo precisa de mais do que isso 🙂

---

<div class="post-metadata">

### Author: ![dafegosa](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dafegosa/32/292270_2.png) [@dafegosa](https://meta.discourse.org/u/dafegosa)
#### Post date: [Fevereiro 7, 2023, 3:49am UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/3 "2023-02-07T03:49:25Z")

</div>

Obrigado! Dicas muito úteis.

Agora, como posso alterar a `content_security_policy` ou o que posso fazer para corrigir isso:

Estou recebendo um erro no console que diz:

```plaintext
head_tag_1.js:7 Refused to load the script 'https://cdn.pendo.io...' because it violates the following Content Security Policy directive: "..." . Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

```

---

<div class="post-metadata">

### Author: ![southpaw](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/southpaw/32/79352_2.png) [@southpaw](https://meta.discourse.org/u/southpaw)
#### Post date: [Fevereiro 7, 2023, 4:25am UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/4 "2023-02-07T04:25:12Z")

</div>

Olá @dafegosa,

Eu _acho_ que a opção 1 nas configurações do site, conforme descrito nesta seção do tópico Política de Segurança de Conteúdo, pode funcionar para o que você está tentando fazer, mas se não funcionar, há muitas informações boas no tópico:

> [@Mitigate XSS Attacks with Content Security Policy](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243#extending-the-default-csp-9):
>
> bookmark This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. person_raising_hand Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

---

<div class="post-metadata">

### Author: ![dafegosa](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dafegosa/32/292270_2.png) [@dafegosa](https://meta.discourse.org/u/dafegosa)
#### Post date: [Fevereiro 7, 2023, 2:00pm UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/5 "2023-02-07T14:00:12Z")

</div>

Ah, entendi. Muito obrigado pela ajuda [Southpaw](https://meta.discourse.org/u/Southpaw), [Coin-coin le Canapin](https://meta.discourse.org/u/Canapin). Isso funciona para mim.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [Março 9, 2023, 2:00pm UTC](https://meta.discourse.org/t/can-i-add-a-snippet-to-the-header/254242/6 "2023-03-09T14:00:58Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
