DTM Adobe Analytics plugin scripts blocked by CSP

homerfv

06-06-2019

Hi Folks,

I have encountered some issue when I have implemented the CSP. Please see below screen cap.

1766854_pastedImage_2.png

My initial solution was to enable 'unsave-eval' [1] however this solution was rejected by our security team.

[1] Adobe DTM Content Security Policy Block

My alternative solution is to avoid using the "new Function" and rather use the actual code and register it as regular JS function.

1766855_pastedImage_4.png

I have tested the plugin and it is working as expected.

My question would be:

  1. Will there be any issue on my alternative solution?
  2. Whats the advantage of using the "new Function" approach compare to my alternative solution?

Many thanks in advance.

Accepted Solutions (0)

Answers (0)