# Error in Content Security Policy and gtag.js

**URL:** <https://meta.discourse.org/t/error-in-content-security-policy-and-gtag-js/186649>\
**Category:** Support\
**Created:** [April 13, 2021, 9:06am UTC](https://meta.discourse.org/t/error-in-content-security-policy-and-gtag-js/186649 "2021-04-13T09:06:27Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\
**Post date:** [April 13, 2021, 10:43am UTC](https://meta.discourse.org/t/error-in-content-security-policy-and-gtag-js/186649/4 "2021-04-13T10:43:49Z")

</div>

I see. It looks like you’re running into an old bug we had, which was fixed back in January:

[FIX: Do not include URL query in auto-generated CSP header (#11673) · discourse/discourse@b008836 · GitHub](https://github.com/discourse/discourse/commit/b0088361a474575a4fcd3fbef77d9fa0286ef113)

This fix hasn’t been backported to the stable branch, so I’m afraid you’ll either have to update to tests-passed, or wait for the next stable release. In the meantime, the warning you see can be safely ignored - the browser will automatically remove the query component of the URL.

---

_[View the full topic](https://meta.discourse.org/t/error-in-content-security-policy-and-gtag-js/186649)._