# CDN URL must be added to csp script src

**URL:** <https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270>\
**Category:** Self-hosting\
**Tags:** cdn\
**Created:** [April 16, 2020, 4:52pm UTC](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270 "2020-04-16T16:52:19Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)\
**Post date:** [April 16, 2020, 5:58pm UTC](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270/2 "2020-04-16T17:58:33Z")

</div>

Hmm, this should be working fine. The CSP is supposed to whitelist the specific folders on the S3 and pull CDNs that scripts come from.

What CSP was/is Discourse sending with the page? Is this a subfolder install?

---

_[View the full topic](https://meta.discourse.org/t/cdn-url-must-be-added-to-csp-script-src/148270)._