# Cannot add content security policy script src

**URL:** https://meta.discourse.org/t/cannot-add-content-security-policy-script-src/321589
**Category:** Support
**Created:** [August 14, 2024, 6:34am UTC](https://meta.discourse.org/t/cannot-add-content-security-policy-script-src/321589 "2024-08-14T06:34:31Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![merefield](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/merefield/32/176214_2.png) [@merefield](https://meta.discourse.org/u/merefield)
#### Post date: [January 1, 2025, 3:47pm UTC](https://meta.discourse.org/t/cannot-add-content-security-policy-script-src/321589/3 "2025-01-01T15:47:49Z")

</div>

> [@Content-Security-Policy now uses 'strict-dynamic'](https://meta.discourse.org/t/content-security-policy-now-uses-strict-dynamic/298172):
>
> From v3.3.0.beta1, Discourse implements a ‘strict-dynamic’ Content Security Policy (CSP). This will eliminate the need for manual CSP config, and will greatly improve compatibility with external tooling like tag-managers and advertising. As a site administrator, you don’t need to do anything. The change will take effect automatically, and any external scripts you’re using will keep working. No changes are required for themes. A small number of plugins [[1]](#footnote-1469066-1) may need a small tweak for compatibili…

---

_[View the full topic](https://meta.discourse.org/t/cannot-add-content-security-policy-script-src/321589)._