Unable to get Google Ad Manager (DFP) ads to show up

Trying out the official ads plugin, and I’ve correctly entered our ad manager network ID and the ad unit IDs in the correct fields, set visibility to all tiers, but no luck getting ads to show up. I am getting this error in the page inspector:

Refused to load https://www.googletagservices.com/tag/js/gpt.js because it does not appear in the script-src directive of the Content Security Policy.

Does the plugin not work on the hosted version of Discourse?

You’ll need to edit your CSP values in your site settings to whitelist the domains that you wish to allow JS from. That way your browser can confirm hackers didn’t insert that JS.