Expand my Community achievements bar.

Join us on September 25th for a must-attend webinar featuring Adobe Experience Maker winner Anish Raul. Discover how leading enterprises are adopting AI into their workflows securely, responsibly, and at scale.

Mark Solution

This conversation has been locked due to inactivity. Please create a new post.

DTM Adobe Analytics plugin scripts blocked by CSP

Avatar

Level 2

Hi Folks,

I have encountered some issue when I have implemented the CSP. Please see below screen cap.

1766854_pastedImage_2.png

My initial solution was to enable 'unsave-eval' [1] however this solution was rejected by our security team.

[1] Adobe DTM Content Security Policy Block

My alternative solution is to avoid using the "new Function" and rather use the actual code and register it as regular JS function.

1766855_pastedImage_4.png

I have tested the plugin and it is working as expected.

My question would be:

  1. Will there be any issue on my alternative solution?
  2. Whats the advantage of using the "new Function" approach compare to my alternative solution?

Many thanks in advance.

0 Replies