Hi, We are getting this error in our forum ( https://forum.playcanvas.com/ ): The source list for Content Security Policy directive 'script-src' contains a source with an invalid path: '/gtag/js?id=UA-XXXXXXXX-X'. The query component, including the '?', will be ignored. We haven’t added that URL in…

I see. It looks like you’re running into an old bug we had, which was fixed back in January: FIX: Do not include URL query in auto-generated CSP header (#11673) · discourse/discourse@b008836 · GitHub This fix hasn’t been backported to the stable branch, so I’m afraid you’ll either have to update t…

How have you configured google tag manager? Are you using the built-in discourse method? Or have you added some custom code to a theme component?

We have a custom theme component that includes https://www.googletagmanager.com/gtag/js?id=U_XXX … manually. We were using the built-in discourse method before but took it out because we needed to add some additional gtag methods called before the analytics are included. Maybe that CSP was set when …

Oh I see that makes sense! OK thanks!

内容安全策略和 gtag.js 中的错误

支持

vkalpias (Vaios) 2021 年4 月 13 日 10:45 5

哦，我明白了，这很有道理！好的，谢谢！

话题		回复	浏览量
Trying to enable Google Analytics GA4 Support analytics	2	140	2025 年7 月 3 日
GTM Refused to load the script because it violates the Content Security Policy Data & reporting	2	3782	2021 年6 月 16 日
Cant get google tag manager to work Data & reporting analytics	6	1892	2023 年9 月 29 日
Can't get script tag to work in landing pages plugin due to content-security-policy Support	4	277	2025 年7 月 1 日
Google Tag Manager (gtm) script blocked by CSP Data & reporting analytics	4	5703	2023 年7 月 3 日

内容安全策略和 gtag.js 中的错误

相关话题