CD
Cloudflare Developers•3w ago
Qasim

Hey All, Using Astro (static with no view transitions), hosted on Cloudflare Pages and using Zaraz

Hey All, Using Astro (static with no view transitions), hosted on Cloudflare Pages and using Zaraz to fire a GA4 tracker (Zaraz consent modal used, no custom JS on my site). The consent works fine on the page that it’s accepted (both accepting and rejecting) however the GA4 tracker doesn’t fire on any other page afterwards. I’m using a standard pageview trigger. Tried using GPT/Gemini for help but I wasn’t getting anywhere. Anything I can do to get this working?
4 Replies
Mackenly
Mackenly•2w ago
Dashboard bug: The dashboard UI does not reflect the actual permissions assigned to components. See the config (no permissions in the array), see screenshot showing the permission enabled. In reality, the permission is not actually enabled and does not execute the code. This switch should reflect the actual state of the component's permissions even if it is disabled from being changed in the dashboard.
No description
No description
Unknown User
Unknown User•2w ago
Message Not Public
Sign In & Join Server To View
TWEL
TWEL•2w ago
Hi there! What is the recommended CSP so Zaraz works without issues? For context: I want to use it to add GA4 and programmatic ads (like Adsense, Mediavine, Ezoic, Raptive). Let's say we configured CSP like that, what should be trimmed off?: 
Content-Security-Policy:
 default-src 'self';
 script-src 'strict-dynamic';
 object-src 'none';
 base-uri 'none';
 form-action 'self';
 frame-src 'self';
 connect-src 'self';
 frame-ancestors 'none';
 style-src 'self';
 img-src 'self';
 upgrade-insecure-requests;
 block-all-mixed-content;
Content-Security-Policy:
 default-src 'self';
 script-src 'strict-dynamic';
 object-src 'none';
 base-uri 'none';
 form-action 'self';
 frame-src 'self';
 connect-src 'self';
 frame-ancestors 'none';
 style-src 'self';
 img-src 'self';
 upgrade-insecure-requests;
 block-all-mixed-content;
Also, does Zaraz add endpoint I need to disallow or may be it requires some domains to be added to CSP' allowlist and so on? My setup: SSG blog built on Astro.
Unknown User
Unknown User•2w ago
Message Not Public
Sign In & Join Server To View

Did you find this page helpful?