如何在 Discourse 中嵌入跟踪 JS

[jakubgs (Jakub)]

哦，我还应该补充一点，我已经看到了以下内容：

Mitigate XSS Attacks with Content Security Policy

This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

并且已将我的 Fathom 域名添加到内容安全策略（Content Security Policy）的允许域名列表中。