Discourse에 추적용 JS를 어떻게 임베드하나요?

[jakubgs (Jakub)]

아, 그리고 이것도 언급해야 할 것 같습니다:

Mitigate XSS Attacks with Content Security Policy

This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

Fathom 도메인을 Content Security Policy의 허용 도메인 목록에 추가했습니다.