Hi, We are getting this error in our forum ( https://forum.playcanvas.com/ ): The source list for Content Security Policy directive 'script-src' contains a source with an invalid path: '/gtag/js?id=UA-XXXXXXXX-X'. The query component, including the '?', will be ignored. We haven’t added that URL in…

I see. It looks like you’re running into an old bug we had, which was fixed back in January: FIX: Do not include URL query in auto-generated CSP header (#11673) · discourse/discourse@b008836 · GitHub This fix hasn’t been backported to the stable branch, so I’m afraid you’ll either have to update t…

How have you configured google tag manager? Are you using the built-in discourse method? Or have you added some custom code to a theme component?

We have a custom theme component that includes https://www.googletagmanager.com/gtag/js?id=U_XXX … manually. We were using the built-in discourse method before but took it out because we needed to add some additional gtag methods called before the analytics are included. Maybe that CSP was set when …

Error in Content Security Policy and gtag.js

Support

vkalpias (Vaios) April 13, 2021, 10:45am 5

Oh I see that makes sense! OK thanks!

Topic		Replies	Views
Trying to enable Google Analytics GA4 Support analytics	2	140	July 3, 2025
GTM Refused to load the script because it violates the Content Security Policy Data & reporting	2	3782	June 16, 2021
Cant get google tag manager to work Data & reporting analytics	6	1892	September 29, 2023
Can't get script tag to work in landing pages plugin due to content-security-policy Support	4	277	July 1, 2025
Google Tag Manager (gtm) script blocked by CSP Data & reporting analytics	4	5703	July 3, 2023

Error in Content Security Policy and gtag.js

Related topics