首页 > 解决方案 > 无法在“TrustedTypePolicyFactory”上执行“createPolicy”:策略“goog#html”不允许

问题描述

如果我使用 CSP 运行 GoogleTagManager,我会收到以下错误

无法在“TrustedTypePolicyFactory”上执行“createPolicy”:不允许使用“goog#html”策略。

我的头脚本看起来像这样

    <script type="text/javascript" async="" src="https://www.google-analytics.com/analytics.js"></script>
<script type="text/javascript" async="" src="https://www.googletagmanager.com/gtag/js?id=G-XXX&amp;l=dataLayer&amp;cx=c"></script>
<script id="GTMscript" data-cookieconsent="ignore" async="" src="https://www.googletagmanager.com/gtm.js?id=GTM-XXXXX"></script>
   <script id="Cookiebot" src="https://consent.cookiebot.com/uc.js" data-cbid="XXXX" data-blockingmode="auto" type="text/javascript"></script>
            <meta http-equiv='Content-Security-Policy'
                      content="
                      default-src 'self';
                      frame-src 'self' https://consentcdn.cookiebot.com;
                      img-src 'self'https://storage.googleapis.com ;
                      font-src 'self';
                      base-uri 'none'; 
                      connect-src 'self' https://www.google-analytics.com ;
                      script-src 'self'https://consent.cookiebot.com https://consentcdn.cookiebot.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic';
                      style-src 'self' 'unsafe-inline';
                      trusted-types angular angular#unsafe-bypass;">

标签: google-analyticsgoogle-tag-manager

解决方案


我刚刚开始实施 TrustedTypes,并在检查 Google 与 TrustedTypes 的兼容性时发现了这个问题。

您是否尝试过trusted-types angular angular#unsafe-bypass;更新trusted-types angular angular#unsafe-bypass goog#html;


推荐阅读