FEATURE: Improve DFP / Ad-manager Content-Security-Policy compat (#201)

Switching to cross-domain iframes is recommended by google here: https://developers.google.com/publisher-tag/guides/content-security-policy
2024-02-19 12:35:22 +00:00 · 2024-02-19 12:35:22 +00:00 · 32f18893ec
parent b0c95114ea
commit 32f18893ec
1 changed files with 3 additions and 0 deletions
--- a/assets/javascripts/discourse/components/google-dfp-ad.js
+++ b/assets/javascripts/discourse/components/google-dfp-ad.js
@ -229,6 +229,9 @@ function loadGoogle() {
      // we always use refresh() to fetch the ads:
      window.googletag.pubads().disableInitialLoad();

+      // Improve CSP compatibility (https://developers.google.com/publisher-tag/guides/content-security-policy)
+      window.googletag.pubads().setForceSafeFrame(true);
+
      window.googletag.enableServices();
    });
  });