From 32f18893ecdbafeebdea174c22911d3001bcd3f2 Mon Sep 17 00:00:00 2001 From: David Taylor Date: Mon, 19 Feb 2024 12:35:22 +0000 Subject: [PATCH] FEATURE: Improve DFP / Ad-manager Content-Security-Policy compat (#201) Switching to cross-domain iframes is recommended by google here: https://developers.google.com/publisher-tag/guides/content-security-policy --- assets/javascripts/discourse/components/google-dfp-ad.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/assets/javascripts/discourse/components/google-dfp-ad.js b/assets/javascripts/discourse/components/google-dfp-ad.js index d2347be..9021419 100755 --- a/assets/javascripts/discourse/components/google-dfp-ad.js +++ b/assets/javascripts/discourse/components/google-dfp-ad.js @@ -229,6 +229,9 @@ function loadGoogle() { // we always use refresh() to fetch the ads: window.googletag.pubads().disableInitialLoad(); + // Improve CSP compatibility (https://developers.google.com/publisher-tag/guides/content-security-policy) + window.googletag.pubads().setForceSafeFrame(true); + window.googletag.enableServices(); }); });