Uncaught EvalError due to missing unsafe-eval in CSP

@christophberger wrote:

Hi,

I cannot get a new Matomo instance to work on a server that has no unsafe-eval rule in the CSP. The UI renders incompletely (no data), and the browser console shows “uncaught EvalError” messages.

The only similar issue I found here is https://forum.matomo.org/t/problems-with-tight-csp-policies/28405; however, this thread died with no solution.

I would be grateful for any hint that helps me fixing this. Thanks.

Uncaught EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' fathom.christophberger.com disqus.com *.disqus.com *.mailerlite.com c.disquscdn.com matomo.christophberger.com".

Posts: 1

Participants: 1

Read full topic