# Content-Security-Policy now uses 'strict-dynamic'

**URL:** <https://meta.discourse.org/t/content-security-policy-now-uses-strict-dynamic/298172>\
**Category:** Announcements\
**Created:** [March 7, 2024, 3:24pm UTC](https://meta.discourse.org/t/content-security-policy-now-uses-strict-dynamic/298172 "2024-03-07T15:24:39Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\
**Post date:** [May 13, 2024, 8:55am UTC](https://meta.discourse.org/t/content-security-policy-now-uses-strict-dynamic/298172/3 "2024-05-13T08:55:00Z")

</div>

No change there - you can still add ‘unsafe eval’ ( **with the quotes** ) to the `content security script src` site setting.

---

_[View the full topic](https://meta.discourse.org/t/content-security-policy-now-uses-strict-dynamic/298172)._