我可以在页眉中添加一个代码片段吗？

[southpaw]

您好 @dafegosa，

我认为内容安全策略主题的此部分中描述的站点设置中的选项 1 可能会对您正在做的事情有所帮助，但如果不行，该主题中还有很多有用的信息：

Mitigate XSS Attacks with Content Security Policy

This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…