Expand my Community achievements bar.

DTM Adobe Analytics plugin scripts blocked by CSP

Avatar

Level 2

Hi Folks,

I have encountered some issue when I have implemented the CSP. Please see below screen cap.

1766854_pastedImage_2.png

My initial solution was to enable 'unsave-eval' [1] however this solution was rejected by our security team.

[1] Adobe DTM Content Security Policy Block

My alternative solution is to avoid using the "new Function" and rather use the actual code and register it as regular JS function.

1766855_pastedImage_4.png

I have tested the plugin and it is working as expected.

My question would be:

  1. Will there be any issue on my alternative solution?
  2. Whats the advantage of using the "new Function" approach compare to my alternative solution?

Many thanks in advance.

0 Replies