Issue with Strict Dynamic and CSP on Atlassian Widget I am encountering an issue with Content Security Policy (CSP) after updating to v3.3.0.beta1. Specifically, I’m trying to embed an Atlassian widget in the header of my container, which was created before this update. Here’s what I’ve added to th…

It looks like the embed.js script is running successfully, so the Discourse side of things is working. However, it is then trying to create a same-origin iframe, which includes ‘parser-inserted’ script tags. That kind of strategy is not compatible with a strict-dynamic CSP. So I think this is some…

CSP error when adding a script via a theme component

Dev

david (David Taylor) September 2, 2024, 10:45am 6

Is the theme component enabled? I don’t see any atlassian script when I check in dev-tools

1 Like

Topic		Replies	Views
Content-Security-Policy now uses 'strict-dynamic' Announcements	13	1144	September 2, 2024
Add CSP nonce-source support Dev	12	3722	November 2, 2018
How to fix problem with CSP Support	8	5371	March 9, 2022
After upgrade the content security policy script src for GTM Data & reporting	4	1798	April 13, 2021
Discourse refused to load with CSP policy error after rebuild Support	5	2789	September 5, 2022

CSP error when adding a script via a theme component

Related topics