Não é possível adicionar política de segurança de conteúdo para script src

[merefield (Robert)]

Content-Security-Policy now uses 'strict-dynamic'

From v3.3.0.beta1, Discourse implements a ‘strict-dynamic’ Content Security Policy (CSP). This will eliminate the need for manual CSP config, and will greatly improve compatibility with external tooling like tag-managers and advertising. As a site administrator, you don’t need to do anything. The change will take effect automatically, and any external scripts you’re using will keep working. No changes are required for themes. A small number of plugins [1] may need a small tweak for compatibili…