# Why Cookie Consent Doesn't Show Up?

**URL:** https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175
**Category:** Support
**Created:** [February 2, 2019, 1:06am UTC](https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175 "2019-02-02T01:06:52Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Anatolia](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/anatolia/32/133777_2.png) [@Anatolia](https://meta.discourse.org/u/Anatolia)
#### Post date: [February 2, 2019, 1:06am UTC](https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175/1 "2019-02-02T01:06:52Z")

</div>

Hi, I tried that cookie consent code below but it didn’t work. I’ve copied its code to \</ head \> in customizing menu as it’s said. Anyone can tell me what did I wrong?

Thanks.

Code here:  
[https://cookieconsent.insites.com/download/](https://cookieconsent.insites.com/download/)

Also there is a video which shows it works:

[![](https://global.discourse-cdn.com/meta/original/4X/0/2/3/02345c80557943121044b2d2fb88b3dbdf1fc690.jpeg "How To Add A Cookie Popup To A Discourse Forum") ](https://www.youtube.com/watch?v=7VYKgZepSAg)

---

<div class="post-metadata">

### Author: ![tshenry](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tshenry/32/119495_2.png) [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [February 2, 2019, 1:21am UTC](https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175/2 "2019-02-02T01:21:00Z")

</div>

This is due to Content Security Policy. You will need to whitelist the script source per these instructions (particularly note [this part](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243#heading--extend-default-csp)):

> [@Mitigate XSS Attacks with Content Security Policy](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243):
>
> bookmark This guide explains how to use Content Security Policy (CSP) to mitigate Cross-Site Scripting (XSS) attacks in Discourse. It covers CSP basics, configuration, and best practices. person_raising_hand Required user level: Administrator Summary Content Security Policy (CSP) is a crucial security feature in Discourse that helps protect against Cross-Site Scripting (XSS) and other injection attacks. This guide covers the basics of CSP, how it’s implemented in Discourse, and how to c…

---

<div class="post-metadata">

### Author: ![Anatolia](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/anatolia/32/133777_2.png) [@Anatolia](https://meta.discourse.org/u/Anatolia)
#### Post date: [February 2, 2019, 2:46am UTC](https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175/5 "2019-02-02T02:46:52Z")

</div>

Thank you, it’s working now.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [March 4, 2019, 2:47am UTC](https://meta.discourse.org/t/why-cookie-consent-doesnt-show-up/108175/6 "2019-03-04T02:47:03Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.