Security in Joomla! 5.x • Re: Configuring CSP for Google Tag Manager

Is no one running into this issue?

So adding https://www.googletagmanager.com to my script-src, ing-src, and connect-src policy directives and uncommenting the nonce-aware version of the Google analytics script in my index file (disabled the non nonce-aware version) did not remove the refusal to execute warning in my console.

Here's my script-src policy:
'self' https://www.mysite.com 'nonce-{SERVER-GENERATED-NONCE}' https://www.googletagmanager.com https://www.google-analytics.com;

I'm following instructions from here:
https://developers.google.com/tag-platf ... 20properly.

Need some specific help to get Google Analytics working please.

Statistics: Posted by railer — Fri Mar 07, 2025 5:00 pm

---