Issue with Strict Dynamic and CSP on Atlassian Widget I am encountering an issue with Content Security Policy (CSP) after updating to v3.3.0.beta1. Specifically, I’m trying to embed an Atlassian widget in the header of my container, which was created before this update. Here’s what I’ve added to th…

It looks like the embed.js script is running successfully, so the Discourse side of things is working. However, it is then trying to create a same-origin iframe, which includes ‘parser-inserted’ script tags. That kind of strategy is not compatible with a strict-dynamic CSP. So I think this is some…

Erreur CSP lors de l'ajout d'un script via un composant de thème

Dev

david (David Taylor) Septembre 2, 2024, 10:45 6

Is the theme component enabled? I don’t see any atlassian script when I check in dev-tools

1 « J'aime »

Sujet		Réponses	Vues
Cannot add content security policy script src Support	2	73	Janvier 1, 2025
Content-Security-Policy now uses 'strict-dynamic' Announcements	13	1477	Septembre 2, 2024
Can't get script tag to work in landing pages plugin due to content-security-policy Support	5	71	Juillet 1, 2025
After upgrade the content security policy script src for GTM Data & reporting	4	1847	Avril 13, 2021
Theme component invalid “extend content security policy” value Bug	4	87	Février 14, 2025

Erreur CSP lors de l'ajout d'un script via un composant de thème

Sujets connexes