search

cloudgrayau / csp

Content Security Policy plugin for Craft CMS 4
MIT License
5 stars 0 forks source link

Nonce not added to Meta tag #2

Open twustep opened 2 hours ago

twustep commented 2 hours ago

Hello, thanks for creating such a great plugin.

I have installed the CSP plugin to work along side SEOMatic.

It all works as intended. I have google tags and facebook tags rendering through SEOMatic, the inline tags correctly render with a nonce. CSP Plugin then reads those nonces and sets them in the Meta Tags. This all works as expected.

However, I have multiple sites in the craft CMS that all use the same layout.twig and CMS settings. Each site gets its own google and facebook tag. I can see that SEOMatic correctly renders the nonces for the tags. But the nonces are NOT present on the meta tags which causes a CSP violation.

In other words, it seems like SEOMatic and CSP Plugin work correctly on the main site but not on the secondary sites.

From what I can see SEOMatic is configured correctly and I suspect I either don't have something set on the CSP plugin side or perhaps code needs to be modified to support this.

I am happy to provide urls and/or more information. I appreciate your help in advance! Thank you!

cloudgrayau commented 2 hours ago

I will have a look. I assume by the "Google" tags and "Facebook" tags you mention, you are referring to the tracking codes in SEOMatic?

twustep commented 1 hour ago

Yes, that is correct. The Google and Facebook tags are the ones I setup in SEOMatic and render in the markup. Each site has their own Tag IDs (facebook and gtm) that are configured in the CMS.

Thank you so much!