Issues After Enabling Content-Security-Policy HTTP Header Value

[aboarken]

Hello Joomlers,

Please I need your support as my template java scripts and other external scripts like the online chat and google reCAPTCHA are blocked after I have configured httpheader plugin:

*Content-Security-Policy >>> Value: script-src 'self'

Please how to fix this issue? Thanks in in advance.

Regards, Ahmad Moussa

[Webdongle]

If you can't open administrator you can edit the plugin in the database.

[aboarken]

Hello Webdongle, thank you for your reply. I can access the administrator backend...my issue is that Google ReCAPTCHA is blocked with other google and extra scripts added to my site template due to the HTTPHeader configuration. Can you help please? If I remove the force Content-Security-Policy, everything will work without any issues.

[Webdongle]

Not 100% sure but doesn't Content-Security-Policy >>> Value: script-src 'self' prevent scripts from outside sources running?
In any case.
IF you don't know how to configure it
THEN EITHER
you could break your site
OR
you could inadvertently make your site less secure

[aboarken]

Thank you. In this case, how I can do an exception for those scripts from outside like Google and Chatbots? Can you help please?