Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JavaScript won't load when Trusted Types header is present #22

Open
tmb-github opened this issue Oct 24, 2021 · 0 comments
Open

JavaScript won't load when Trusted Types header is present #22

tmb-github opened this issue Oct 24, 2021 · 0 comments

Comments

@tmb-github
Copy link

tmb-github commented Oct 24, 2021

My site uses the Trusted Types Content Security Policy, as detailed here:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types

and:

https://web.dev/security-headers/#tt

Specifically, my site sends out this CSP header: require-trusted-types-for 'script';

It prevents the Ecwid JavaScript from executing. Please update the JavaScript to allow for this. (Google Analytics and Universal Tracking have been revised to account for this header...it's gaining a lot of traction.) Many thanks!
Untitled

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant