Can't Get Google Analytics Working.

[nodlek-ctrl]

When I deploy my site, CSP is blocking google analytics. I found that you can add a csp nonce- but I have no idea where to put that.
Sorry for the pain.

[stumpyfr]

Got the same issue with another tracker, you need override _layouts/default/html and update the line:

jekyll-theme-console/_layouts/default.html

Line 3 in 7698390

<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; img-src 'self'; font-src 'self' https://fonts.gstatic.com; connect-src 'self'; media-src 'self'; object-src 'self'; child-src 'self'; form-action 'none'; base-uri 'self'" />

For example with Heap Analytics:

<meta http-equiv="Content-Security-Policy" content="script-src https://cdn.heapanalytics.com https://heapanalytics.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://heapanalytics.com; style-src https://heapanalytics.com fonts.googleapis.com 'self'; connect-src https://heapanalytics.com; font-src https://heapanalytics.com fonts.gstatic.com;">