Issue with Strict Dynamic and CSP on Atlassian Widget I am encountering an issue with Content Security Policy (CSP) after updating to v3.3.0.beta1. Specifically, I’m trying to embed an Atlassian widget in the header of my container, which was created before this update. Here’s what I’ve added to th…

It looks like the embed.js script is running successfully, so the Discourse side of things is working. However, it is then trying to create a same-origin iframe, which includes ‘parser-inserted’ script tags. That kind of strategy is not compatible with a strict-dynamic CSP. So I think this is some…

テーマコンポーネント経由でスクリプトを追加する際のCSPエラー

開発

david (David Taylor) 2024 年 9 月 2 日午前 10:45 6

Is the theme component enabled? I don’t see any atlassian script when I check in dev-tools

「いいね！」 1

トピック		返信	表示
Cannot add content security policy script src Support	2	73	2025 年 1 月 1 日
Content-Security-Policy now uses 'strict-dynamic' Announcements	13	1477	2024 年 9 月 2 日
Can't get script tag to work in landing pages plugin due to content-security-policy Support	5	71	2025 年 7 月 1 日
After upgrade the content security policy script src for GTM Data & reporting	4	1847	2021 年 4 月 13 日
Theme component invalid “extend content security policy” value Bug	4	87	2025 年 2 月 14 日

テーマコンポーネント経由でスクリプトを追加する際のCSPエラー

関連トピック