Issue with Strict Dynamic and CSP on Atlassian Widget I am encountering an issue with Content Security Policy (CSP) after updating to v3.3.0.beta1. Specifically, I’m trying to embed an Atlassian widget in the header of my container, which was created before this update. Here’s what I’ve added to th…

It looks like the embed.js script is running successfully, so the Discourse side of things is working. However, it is then trying to create a same-origin iframe, which includes ‘parser-inserted’ script tags. That kind of strategy is not compatible with a strict-dynamic CSP. So I think this is some…

添加脚本到主题组件时的CSP错误

开发

david (David Taylor) 2024 年9 月 2 日 10:45 6

Is the theme component enabled? I don’t see any atlassian script when I check in dev-tools

1 个赞

话题		回复	浏览量
Cannot add content security policy script src Support	2	73	2025 年1 月 1 日
Content-Security-Policy now uses 'strict-dynamic' Announcements	13	1476	2024 年9 月 2 日
Can't get script tag to work in landing pages plugin due to content-security-policy Support	5	71	2025 年7 月 1 日
After upgrade the content security policy script src for GTM Data & reporting	4	1846	2021 年4 月 13 日
Theme component invalid “extend content security policy” value Bug	4	87	2025 年2 月 14 日

添加脚本到主题组件时的CSP错误

相关话题