Hello. I can’t get Javasript working in my customised theme section. I have another discourse forum where it works fine. And I’ve never had a problem before. Simply trying to add the clicky code and the google adsense code to verify the site. Driving me mad. Any help would be awesome. DrinkWit…

Ok thanks. I’ll look into that. What I just noticed is my javascript works on 404 pages…

[图片] j.jaffeux: I think this is CSP related. Yep you got it. I turned it on and off and it started working. Thanks

It’s your choice to put it off, but configuring it to allow only what your want is by far a safer choice.

Cheer but I can’t get it working. As soon as it is turned on the thing craps out.

You need to add the external domains to the site setting: content_security_policy_script_src in your admin settings page.

Yeah I get that. Looked at the log to see what csp was blocking. Added all the script domains that were showing. And it still never worked on my site.

[图片] j.jaffeux: You need to add the external domains to the site setting: content_security_policy_script_src in your admin settings page. Ok you are right. I added all the domains and it seems to be cool. I see from the logs what I need to add. Thanks.

Javascript 在自定义区域中无法工作

支持

j.jaffeux (Joffrey Jaffeux) 2019 年5 月 14 日 11:03 2

Hello @PaulNicholsonGo,

from a quick look at the browser console when browsing on your site, I think this is CSP related. Please make sure you have read Mitigate XSS Attacks with Content Security Policy

5 个赞

话题		回复	浏览量
Confused about remotely loaded javascript content Support	12	1749	2021 年1 月 8 日
We couldn't find the code on your site Support advertising	9	2373	2022 年10 月 18 日
"Refused to load the script" when adding adsense Support	3	1469	2019 年3 月 10 日
Forgot to edit CSP when adding tracking code via custom component Support	8	1111	2021 年1 月 28 日
Can't get script tag to work in landing pages plugin due to content-security-policy Support	5	164	2025 年7 月 1 日

Javascript 在自定义区域中无法工作

相关话题