Hi, We are getting this error in our forum ( https://forum.playcanvas.com/ ): The source list for Content Security Policy directive 'script-src' contains a source with an invalid path: '/gtag/js?id=UA-XXXXXXXX-X'. The query component, including the '?', will be ignored. We haven’t added that URL in…

I see. It looks like you’re running into an old bug we had, which was fixed back in January: FIX: Do not include URL query in auto-generated CSP header (#11673) · discourse/discourse@b008836 · GitHub This fix hasn’t been backported to the stable branch, so I’m afraid you’ll either have to update t…

How have you configured google tag manager? Are you using the built-in discourse method? Or have you added some custom code to a theme component?

We have a custom theme component that includes https://www.googletagmanager.com/gtag/js?id=U_XXX … manually. We were using the built-in discourse method before but took it out because we needed to add some additional gtag methods called before the analytics are included. Maybe that CSP was set when …

Oh I see that makes sense! OK thanks!

Fehler in der Content Security Policy und gtag.js

Unterstützung

vkalpias (Vaios) 13. April 2021 um 10:45 5

Ah, verstehe, das ergibt Sinn! OK, danke!

Thema		Antworten	Aufrufe
Trying to enable Google Analytics GA4 Support analytics	2	140	3. Juli 2025
GTM Refused to load the script because it violates the Content Security Policy Data & reporting	2	3782	16. Juni 2021
Cant get google tag manager to work Data & reporting analytics	6	1892	29. September 2023
Can't get script tag to work in landing pages plugin due to content-security-policy Support	4	278	1. Juli 2025
Google Tag Manager (gtm) script blocked by CSP Data & reporting analytics	4	5704	3. Juli 2023

Fehler in der Content Security Policy und gtag.js

Verwandte Themen