# JS script is not loading

**URL:** https://meta.discourse.org/t/js-script-is-not-loading/146306
**Category:** Support
**Created:** [March 31, 2020, 4:13pm UTC](https://meta.discourse.org/t/js-script-is-not-loading/146306 "2020-03-31T16:13:57Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![zcuric](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zcuric/32/292837_2.png) [@zcuric](https://meta.discourse.org/u/zcuric)
#### Post date: [March 31, 2020, 4:32pm UTC](https://meta.discourse.org/t/js-script-is-not-loading/146306/2 "2020-03-31T16:32:11Z")

</div>

You can find solution to your problem here:

> [@Mitigate XSS Attacks with Content Security Policy](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243):
>
> bookmark This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. person_raising_hand Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

---

_[View the full topic](https://meta.discourse.org/t/js-script-is-not-loading/146306)._