# When install html script facing issue?

**URL:** <https://meta.discourse.org/t/when-install-html-script-facing-issue/148507>\
**Category:** Support\
**Created:** [April 19, 2020, 5:45am UTC](https://meta.discourse.org/t/when-install-html-script-facing-issue/148507 "2020-04-19T05:45:35Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![BishopV](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bishopv/32/185715_2.png) [@BishopV](https://meta.discourse.org/u/BishopV)\
**Post date:** [April 19, 2020, 5:45am UTC](https://meta.discourse.org/t/when-install-html-script-facing-issue/148507/1 "2020-04-19T05:45:35Z")

</div>

im facing issue to install pure chat script in my forum , because discourse enable whilelist filter for security protect . I tried to add few pure chat link into whitelist but still cannot show out the pure chat conversation tab , kindly assist , here is the error message :

legacy.111147.js:1 Uncaught EvalError: Refused to evaluate a string as JavaScript because ‘unsafe-eval’ is not an allowed source of script in the following Content Security Policy directive:

```
at new Function (<anonymous>)
at Function.b.template (legacy.111147.js:1)
at Module.<anonymous> (legacy.111147.js:32)
at n (legacy.111147.js:1)
at Object.<anonymous> (legacy.111147.js:32)
at n (legacy.111147.js:1)
at legacy.111147.js:1
at legacy.111147.js:1

```

anyone know how to settle this issue ? if i unable CSP the script will working fine . but how to enable CSP and working on it too ?

---

_[View the full topic](https://meta.discourse.org/t/when-install-html-script-facing-issue/148507)._
