Content Security Policy Incompatible with Some Pages
» Email someone you know about this article.
Content Security Policy did not work with pages that carry Google AdSense advertisements or Google Analytics code. Google apparently refused to support either service if CSP was on the page, even if the CSP was set to the most permissive settings. While you may still have received site-wide Google Analytics data, you probably didn’t receive per-page data or any Google AdSense ads.
I don’t know if other suppliers of advertising or analytics data were also uncooperative with CSP.
This may have changed. I have not tested it lately.
If this has not changed, you may have to comment CSP out completely or delete it altogether.
I have no good suggestions for using CSP. You may have to live without CSP, at least for now. If you’d like to look more into it, try these:
- — Stack Overflow topic ()
- — Google on Content Security Policy (current)
