Sie sind nicht angemeldet.

Google Analytics 2019 and Content-Security-Policy

indexofrefraction

Profi

  • »indexofrefraction« ist der Autor dieses Themas

Beiträge: 1 362

  • Nachricht senden

1

Mittwoch, 11. September 2019, 18:20

Google Analytics 2019 and Content-Security-Policy

Hi,

I can use Google Analytics with their snippet inserted after the <head> element,
but i want to load it dynamically only if my variable GA_MEASUREMENT_ID is set.

sadly the dynamic loading triggers Content-Security-Policy problems !
has anyone maybe a clue how to set this up?

this is my Content-Security-Policy script-src definition :

Quellcode

 
1

<meta http-equiv="Content-Security-Policy" content="... ; script-src 'self' 'unsafe-inline' www.googletagmanager.com; ..." />

this is my code using jquery to load google analytics

Quellcode

 
1
2
3
4
5
6
7
8
9
10
11

var GA_MEASUREMENT_ID = 'UA-XXXXXXXX-X'; // set dynamically from configuration file
$.ajax({
	url: "https://www.googletagmanager.com/gtag/js?id="+GA_MEASUREMENT_ID,
	success: function() {
		window.dataLayer = window.dataLayer || [];
		function gtag() { dataLayer.push(arguments); } 
		gtag('js', new Date());
		gtag('config', GA_MEASUREMENT_ID);
		console.log('google analytics is active!');
	}
});

and these are the errors i get:

Quellcode

 
1
2
3

[Error] Origin https://my.domain.com is not allowed by Access-Control-Allow-Origin.
[Error] XMLHttpRequest cannot load https://www.googletagmanager.com/gtag/js?id=UA-XXXXXXXX-X due to access control checks.
[Error] Failed to load resource: Origin https://my.domain.com is not allowed by Access-Control-Allow-Origin.


best, index
zFilter plugin -- zFlare plugin -- zSnapshot plugin

Dieser Beitrag wurde bereits 3 mal editiert, zuletzt von »indexofrefraction« (11. September 2019, 18:35)

indexofrefraction

Profi

  • »indexofrefraction« ist der Autor dieses Themas

Beiträge: 1 362

  • Nachricht senden

2

Mittwoch, 11. September 2019, 22:22

Ok.... self-solved *whistling*

this seems to work :

Quellcode

 
1
2
3
4
5
6
7
8

$.getScript("https://www.googletagmanager.com/gtag/js?id="+GA_MEASUREMENT_ID)
	.done(function() {
		window.dataLayer = window.dataLayer || [];
		window.gtag = function() { dataLayer.push(arguments); } // make gtag() global for use in app
		gtag('js', new Date());
		gtag('config', GA_MEASUREMENT_ID);
		console.log('google analytics active!');
	});

no special Content-Security-Policy needed
zFilter plugin -- zFlare plugin -- zSnapshot plugin

Ähnliche Themen