# Voice Recorder Component

**URL:** <https://meta.discourse.org/t/voice-recorder-component/215621>\
**Category:** Theme component\
**Tags:** pavilion\
**Created:** [January 22, 2022, 8:43am UTC](https://meta.discourse.org/t/voice-recorder-component/215621 "2022-01-22T08:43:42Z")\
**Posts on this page:** 1\
**Showing post:** 101

<div class="post-metadata">

**Author:** ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)\
**Post date:** [April 26, 2024, 1:43am UTC](https://meta.discourse.org/t/voice-recorder-component/215621/101 "2024-04-26T01:43:19Z")

</div>

I can reproduce.

A recently introduced setting allows external scripts to run dynamically without manual configuration.  
It’s not available in 3.2.

![image](https://global.discourse-cdn.com/meta/original/4X/a/a/7/aa78b05faed37c93f9b092820c937c33fe8a80b8.png)

it’s definitively not a good idea to allow the “_/uploads_” directory.  
However, as a workaround, allowing only the URLs should be okay.

If you go to the component settings:

 ![image](https://global.discourse-cdn.com/meta/original/4X/d/9/5/d952c6daf05adc86ee6c26838f1135f52402ef53.png)

You can right-click on each link to copy and paste them to the `content security policy script-src` setting.

 ![image](https://global.discourse-cdn.com/meta/original/4X/6/f/3/6f3c11a01338817e5156fec094e75134e086e78e.png)

I don’t know if there is a better way to handle the CSP issue here from a theme component. 🤔

---

_[View the full topic](https://meta.discourse.org/t/voice-recorder-component/215621)._