# CDN URL must be added to csp script src

**URL:** <https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270>\
**Category:** Self-hosting\
**Tags:** cdn\
**Created:** [April 16, 2020, 4:52pm UTC](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270 "2020-04-16T16:52:19Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [April 16, 2020, 4:52pm UTC](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270/1 "2020-04-16T16:52:19Z")

</div>

I’ve got a site configured with ENV like this:

```plaintext

  DISCOURSE_FORCE_HTTPS: true
  DISCOURSE_S3_ACCESS_KEY_ID: 'KEY'
  DISCOURSE_S3_SECRET_ACCESS_KEY: 'SECRET'
  DISCOURSE_BACKUP_LOCATION: 's3'
  DISCOURSE_ENABLE_S3_UPLOADS: true
  DISCOURSE_ENABLE_S3_INVENTORY: false
  DISCOURSE_S3_BACKUP_BUCKET: 'mybucket/backups'
  DISCOURSE_S3_UPLOAD_BUCKET: 'mybucket'
  DISCOURSE_S3_CDN_URL: 'https://mybuckets3.cdn.literatehosting.com'
  DISCOURSE_S3_REGION: 'us-west-1'
  DISCOURSE_BACKUP_WITH_UPLOADS: 'false'
  DISCOURSE_CDN_URL: 'https://mybucket.cdn.literatehosting.com'

```

It worked fine until I added the `s3 cdn url`. After I added the S3 CDN, my browser started rejecting requests to the normal (not S3) CDN. I added the CDN url to `SiteSetting.content_security_policy_script_src=` and then it worked again. This seems like a bug, no? I just did a restart after changes these ENV variables, not a rebuild. Do I need to do a `rake assets:precompile` when I changed the CDN settings?

---

_[View the full topic](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270)._