Google Ads 未显示

支持
1

I’m seeing the following error when verifying why google ads are not displaying.

Refused to load the script 'https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample'

I’m not a coder or anything. I’ve tried some suggestions for adding meta tags for Content Security Policy but those seem to break the entire site even more.

Any suggestions? I’m using the default Light theme with a version 2.3.0.beta9 that is used on Digital Ocean marketplace.

2

Did you install Official Discourse Advertising Plugin not showing adsense ads or are you trying to create ads some other way?

3

I’ve tried both. I installed the official ads plugin and added my own google script code in the /head under customizations.

I just discovered the content_security_policy setting as well and disabled it, was still getting errors but that was with my script in the /head, disabling that now and trying with the plugin settings.

4

Seems the errors are gone. Do I have to create ad units to throw in the ad unit # or if I set these as responsive should they start loading by chance?

5

Ah, looks like it’s now loading some ads. I think I found the magic fix. :slight_smile:

6

For anyone who runs into the same issues, steps to get ads going seems to be:

  1. Disable content_security_policy
  2. Make sure the official Ad plugin is installed and active.
  3. Create ad unit’s for mobile and desktop to place in the ad settings for use.

Seems if you try doing meta http-equiv="Content-Security-Policy" in your head tags, it still complains about the policies if the security policy is enabled in the admin settings.

7

Note that you make your site vulnerable to hackers if you disable CSP entirely.

8

Yes.

In my case my own CSP in my head tags were being overwritten by the CSP being enabled.

Disable in admin settings, setup CSP in headers or configure your own within nginx, etc.

9

我也遇到了同样的问题。

广告插件竟然被提供，却只字未提 CSP 配置，这实在有点烦人——看来只能自己摸索着进入 bug 的荒野了，对吧？

为什么不直接在广告插件的 README 中告知用户：您需要配置 CSP？

广告插件本应自动处理 AdSense 或相关广告平台所需的 CSP 条目。

10

默认启用 CSP 是相对较新的功能，也是一项重要的安全特性，因此我们需要更新我们的文档。