"Content Security Policy" errors in Nextcloud for calls to Matoma about cloud_piwik HOT 5 CLOSED

If I remember correctly NC is using different CSP approaches depending on the browser. So maybe something changed there. I don't have time to track this down (especially without any error message), therefore I recommend to setup a rewrite/proxy.

from cloud_piwik.

Hello,

I have the same issue since I updated Matomo 4+, changelog says :

The JS tracker is now tracking using « navigator.sendBeacon » by default. If you are using a Content Security Policy header, please adjust your header to also allow « connect-src » see the example in our FAQ. Alternatively, you can disable « sendBeacon » using the JS tracker method _paq.push(["disableAlwaysUseSendBeacon"]);.

Error in the console is :

The CSP seems generated by NextCloud itself.
If defined in the webserver conf we can not define the script-src value. Example :

I hope it can help.
Regards.

from cloud_piwik.

@GuiGuiSoft sounds like you have found the reason for this error message. Thanks a lot. Can you try to add $policy->addAllowedConnectDomain($allowedUrl); to

from cloud_piwik.

I think this fixed it.
I don't see the error any more, and matomo is showing the hits again.
Thank you.

from cloud_piwik.

fixed in ae05ca1

from cloud_piwik.