Skip to content

JavaScript won't load when Trusted Types header is present #22

@tmb-github

Description

@tmb-github

My site uses the Trusted Types Content Security Policy, as detailed here:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types

and:

https://web.dev/security-headers/#tt

Specifically, my site sends out this CSP header: require-trusted-types-for 'script';

It prevents the Ecwid JavaScript from executing. Please update the JavaScript to allow for this. (Google Analytics and Universal Tracking have been revised to account for this header...it's gaining a lot of traction.) Many thanks!
Untitled

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions