Web Analytics CSP

@James cybermon.uk is my domain and I get the beacon.min.js cannot be run due to my CSP but if you are using nonces which I am it should run but its not due to want to run inline which is bad even though I have this in my hugo theme https://github.com/L1ghtn1ng/hugo-theme-hello-friend-ng-cloudflare/blob/master/layouts/partials/javascript.html#L13
GitHub
hugo-theme-hello-friend-ng-cloudflare/javascript.html at master · L...
Pretty basic theme for Hugo that covers all of the essentials. All you have to do is start typing and modified for cloudflare support - hugo-theme-hello-friend-ng-cloudflare/javascript.html at mast...
6 Replies
James
James3y ago
I'm not seeing it blocked on my end once I turned off my adblock. There's some violations for style-src, but nothing for script-src.
Jay Townsend
Jay TownsendOP3y ago
Ah, okay thats given me a clue to have a look at my firewall to see if its getting ad blocked @James that did the trick it was being blocked on my DNSBL added it to the whitelist and now sorted for that thanks, was driving me mad and did not think to check the firewall to see if it was blocked. There is 2 other issues that I have though with web analytics me adding my preview site does not get picked up when I type in the url for it so it does not get the proxy icon even though it is on cloudflare pages as well if that make sense?
James
James3y ago
I don't know about that one, sorry. Hopefully someone else does
Jay Townsend
Jay TownsendOP3y ago
fair enough thanks for your help and you able to see csp errors on my site? I take it you work at cloudflare? I have got the error that you mentioned about on report uri so am fixing that
James
James3y ago
I do not work at Cloudflare, no. I'm a community champion and MVP though, so help out a lot of folks and am very familiar with their products.
Jay Townsend
Jay TownsendOP3y ago
Fair enough, good to know
Want results from more Discord servers?
Add your server