Issue with Strict Dynamic and CSP on Atlassian Widget I am encountering an issue with Content Security Policy (CSP) after updating to v3.3.0.beta1. Specifically, I’m trying to embed an Atlassian widget in the header of my container, which was created before this update. Here’s what I’ve added to th…

It looks like the embed.js script is running successfully, so the Discourse side of things is working. However, it is then trying to create a same-origin iframe, which includes ‘parser-inserted’ script tags. That kind of strategy is not compatible with a strict-dynamic CSP. So I think this is some…

CSP error when adding a script via a theme component

Dev

david (David Taylor) September 2, 2024, 10:45am 6

Is the theme component enabled? I don’t see any atlassian script when I check in dev-tools

1 Like

Topic		Replies	Views
How to fix problem with CSP Support	8	5172	March 9, 2022
DISCOURSE_CDN_URL causes content security policy violations? Installation cdn	4	1704	February 6, 2020
After upgrade the content security policy script src for GTM Data & reporting	4	1788	April 13, 2021
Discourse refused to load with CSP policy error after rebuild Support	5	2788	September 5, 2022
Can I add a snippet to the header? Support	5	787	February 7, 2023

CSP error when adding a script via a theme component

Related Topics