JS script is not loading

[pixelemotion]

Hello everyone,

I’m trying to embed the the optinmonster JS script in order to show a welcome pop-up for the launch of the forum.

I used the HTML Theme component to insert it right before the

But I get this error in the browser console :

Refused to load the script 'https://a.omappapi.com/app/js/api.min.js' because it violates the following Content Security Policy directive: "script-src 'report-sample' .... Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
Is there something I should allow in the settings to load the script ?

Thanks for the help

[zcuric (Zdravko)]

You can find solution to your problem here:

Mitigate XSS Attacks with Content Security Policy

What is Content Security Policy? Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware. – Content Security Policy (CSP) - HTTP | MDN XSS is still one of the most common web vulnerability – if someone else can run scripts on your site, it is not your site anymore. …

[pixelemotion]

Yep, exactly what I needed. Thanks !