Expand my Community achievements bar.

Join us on September 25th for a must-attend webinar featuring Adobe Experience Maker winner Anish Raul. Discover how leading enterprises are adopting AI into their workflows securely, responsibly, and at scale.

Mark Solution

This conversation has been locked due to inactivity. Please create a new post.

CSP Error

Avatar

Level 1

ERROR EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' assets.adobedtm.com".

    at new Function (<anonymous>)

    at t.init (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:4)

    at Location._satellite.init.pageLoadRules.trigger.arguments (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:4)

    at satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:3

    at satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:3

    at Object.each (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:2)

    at b.executeCustomSetupFuns (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:3)

    at b.$trackPageView (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:3)

    at b.triggerCommand (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:2)

    at b.flushQueueExceptTrackLink (satelliteLib-3083d39de3b1695199f0f543f01765b031bcb8d7-staging.js:3)

Does anyone perhaps have a means to resolve this error?

It seems to fail irrespective of the variant attempted and the biggest issue seems to be the use of unsafe-eval and unsafe-inline.

e.g.

"default-src 'self' 'unsafe-inline' *.adobedtm.com *.sc.omtrdc.net; font-src 'self' data:; img-src 'self' data: *.sc.omtrdc.net;"

or

script-src * data: https://xxxxxxxxxx 'unsafe-eval'; in the content-string to script-src * data: https://xxxxxx 'unsafe-inline' 'unsafe-eval';

0 Replies