Getting "Refused to load the script" when try to load comments.

[mdrathik]

Anyone can help me to get rid of this error.
https://prnt.sc/26sly1d

This template already using this , but don't know why its giving the error.
const ContentSecurityPolicy = default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app; style-src 'self' 'unsafe-inline' *.googleapis.com cdn.jsdelivr.net; img-src * blob: data:; media-src 'none'; connect-src *; font-src 'self' fonts.gstatic.com cdn.jsdelivr.net; frame-src giscus.app

[tszhong0411]

I solved it like this and this works. But I don't know if this is the right way to do it.

const ContentSecurityPolicy = `
  default-src 'self';
  script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app scripts.simpleanalyticscdn.com www.googletagmanager.com utteranc.es;
  style-src 'self' 'unsafe-inline' *.googleapis.com cdn.jsdelivr.net;
  img-src * blob: data:;
  media-src 'none';
  connect-src *;
  font-src 'self' fonts.gstatic.com cdn.jsdelivr.net;
  frame-src giscus.app
`;

[AlexanderZeilmann]

Yes, this is the correct way 👍

[mdrathik]

Thanks a lot, both of you Guyz. @tszhong0411 & @AlexanderZeilmann
Basically, I missed adding utteranc.es.
It's fixed