We’re currently trying to integrate the payment provider Steady – Du machst Medien. Wir den Rest. into our discourse site. Unfortunately, I don’t get their javascript code past our content security policy. I whitelisted every domain I could find in the code, but still get this in the developer conso…

I think the script you’re trying to integrate uses eval() which is blocked by default (the reason is explained in the link above) so you need to add 'unsafe-eval' to your CSP setting if you want that to work.

Why do you think this is a CSP error? (If it was, the code wouldn’t even run, and it is, because it throws an error).

[이미지] RGJ: Why do you think this is a CSP error? Everything works as expected, when I deactivate the content security policy, so this was the best guess I could come up with. :wink: Thanks for the hint! Do you have a tip on how to solve this?

Content Security Policy 관련 도움 요청

제품 지원

RGJ (Richard - Communiteq) 5월 15, 2020, 4:16오후 2

왜 이것이 CSP 오류라고 생각하시나요?

(만약 그렇다면, 코드가 실행되지도 않았을 텐데, 실제로는 실행되고 있으며, 오류가 발생하고 있습니다).

글		댓글	조회수
Mitigate XSS Attacks with Content Security Policy Site Management how-to , content-security-policy	30	25748	6월 13, 2023
After upgrade the content security policy script src for GTM Data & reporting	4	1986	4월 13, 2021
Can't get script tag to work in landing pages plugin due to content-security-policy Product Support	4	287	7월 1, 2025
Cannot add content security policy script src Product Support	2	201	1월 1, 2025
When install html script facing issue? Product Support	8	1724	4월 25, 2020

Content Security Policy 관련 도움 요청

Related topics