# Stackpath (già MaxCDN) - Token non valido o inaspettato

**URL:** <https://meta.discourse.org/t/stackpath-formerly-maxcdn-invalid-or-unexpected-token/111589>\
**Category:** Product Support\
**Created:** [14 Marzo 2019, 3:02pm UTC](https://meta.discourse.org/t/stackpath-formerly-maxcdn-invalid-or-unexpected-token/111589 "2019-03-14T15:02:05Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![dfriestedt](https://avatars.discourse-cdn.com/v4/letter/d/a698b9/32.png) [@dfriestedt](https://meta.discourse.org/u/dfriestedt)\
**Post date:** [14 Marzo 2019, 3:02pm UTC](https://meta.discourse.org/t/stackpath-formerly-maxcdn-invalid-or-unexpected-token/111589/1 "2019-03-14T15:02:06Z")

</div>

I’m trying to implement the Stackpath CDN (formerly MaxCDN)

The site is [discuss.360velo.com](http://discuss.360velo.com). I’ve followed the CDN instructions.

I added  
`DISCOURSE_CDN_URL: https://b7f7x2b6.stackpathcdn.com` and rebuilt the app.

The site does not load properly. Upon inspection, I’m getting an Uncaught Syntax Error: … Missing / and I get Invalid or Unexpected Token

Then I tried  
`DISCOURSE_CDN_URL: https://b7f7x2b6.stackpathcdn.com/` (I added the / at the end) and rebuilt the app.

Now I get the following error.

```
Refused to load the script 'https://b7f7x2b6.stackpathcdn.com/assets/browser-update-d924ff41586d6dcda055f0cfb41488724ba2e2d5271fef65ce5f480b46f9231d.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample' http://discuss.360velo.com/logs/ http://discuss.360velo.com/sidekiq/ http://discuss.360velo.com/mini-profiler-resources/ https://b7f7x2b6.stackpathcdn.com//assets/ https://b7f7x2b6.stackpathcdn.com//brotli_asset/ http://discuss.360velo.com/extra-locales/ https://b7f7x2b6.stackpathcdn.com//highlight-js/ https://b7f7x2b6.stackpathcdn.com//javascripts/ https://b7f7x2b6.stackpathcdn.com//plugins/ https://b7f7x2b6.stackpathcdn.com//theme-javascripts/ https://b7f7x2b6.stackpathcdn.com//svg-sprite/". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

```

What am I missing?

---

_[View the full topic](https://meta.discourse.org/t/stackpath-formerly-maxcdn-invalid-or-unexpected-token/111589)._