DTM Adobe Analytics plugin scripts blocked by CSP

Avatar

Avatar
Give Back 5
Level 2
homerfv
Level 2

Likes

0 likes

Total Posts

13 posts

Correct reply

0 solutions
Top badges earned
Give Back 5
Give Back 3
Give Back
Ignite 1
Validate 1
View profile

Avatar
Give Back 5
Level 2
homerfv
Level 2

Likes

0 likes

Total Posts

13 posts

Correct reply

0 solutions
Top badges earned
Give Back 5
Give Back 3
Give Back
Ignite 1
Validate 1
View profile
homerfv
Level 2

06-06-2019

Hi Folks,

I have encountered some issue when I have implemented the CSP. Please see below screen cap.

1766854_pastedImage_2.png

My initial solution was to enable 'unsave-eval' [1] however this solution was rejected by our security team.

[1] Adobe DTM Content Security Policy Block

My alternative solution is to avoid using the "new Function" and rather use the actual code and register it as regular JS function.

1766855_pastedImage_4.png

I have tested the plugin and it is working as expected.

My question would be:

  1. Will there be any issue on my alternative solution?
  2. Whats the advantage of using the "new Function" approach compare to my alternative solution?

Many thanks in advance.

Accepted Solutions (0)

Answers (0)