# Javascript resources are being blocked by Content Security Policy (Cloudflare Rocket loader)

**URL:** https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900
**Category:** Self-hosting
**Tags:** unsupported-install
**Created:** [March 14, 2022, 2:14pm UTC](https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900 "2022-03-14T14:14:29Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sanityz\_eclipse](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sanityz_eclipse/32/242793_2.png) [@sanityz\_eclipse](https://meta.discourse.org/u/sanityz_eclipse)
#### Post date: [March 14, 2022, 2:14pm UTC](https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900/1 "2022-03-14T14:14:30Z")

</div>

After installing Discourse using Bitnami docker image, some javascript resources are being blocked by Content Security Policy

[https://mysite/cdn-cgi/apps/head/Ec\_4R3r\_qp6Wu8DwcCflp-OGvgg.js](https://mysite/cdn-cgi/apps/head/Ec_4R3r_qp6Wu8DwcCflp-OGvgg.js)  
[https://mysite/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js](https://mysite/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js)

These two JS resources are being blocked due to Content Security Policy mismatch. Anything I can do to work around it?

I’m running the docker containers behind Nginx

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 14, 2022, 2:42pm UTC](https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900/2 "2022-03-14T14:42:53Z")

</div>

Please see [Troubleshooting Bitnami Installations](https://meta.discourse.org/t/troubleshooting-bitnami-installations/142538).

But disabling rocket loader might help. It breaks things. I would recommend setting cloudflare to dns only to debug.

---

<div class="post-metadata">

### Author: ![sanityz\_eclipse](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sanityz_eclipse/32/242793_2.png) [@sanityz\_eclipse](https://meta.discourse.org/u/sanityz_eclipse)
#### Post date: [March 17, 2022, 10:29am UTC](https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900/3 "2022-03-17T10:29:32Z")

</div>

Thanks ! It was indeed being caused by Cloudflare.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [April 16, 2022, 10:30am UTC](https://meta.discourse.org/t/javascript-resources-are-being-blocked-by-content-security-policy-cloudflare-rocket-loader/220900/4 "2022-04-16T10:30:10Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
