Fix script-src directive in web analytics FAQ#32079
Open
brentonrace wants to merge 1 commit into
Open
Conversation
Corrected the script-src directive to include a trailing slash to support versioned URLs like https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496
Contributor
Review
Fix in your agentFix the following review findings in PR #32079 (https://github.com/cloudflare/cloudflare-docs/pull/32079).
Before making changes, review each finding and present a brief summary table:
- For each finding, state whether you agree, disagree, or need clarification
- If you disagree (e.g. the fix requires disproportionate effort for minimal benefit,
or the finding is factually incorrect), explain why
- If you need clarification before deciding, ask those questions
- Then share your plan for which issues to tackle and in what order
After triaging, fix all legitimate findings. For any you decide to skip,
post a comment on this PR with the finding ID and your reasoning.
---
## Code Review
### Warnings (1)
#### CR-d96b52ef2c70 · Incorrect CSP path example
- **File:** `src/content/docs/web-analytics/faq.mdx` line 117
- **Issue:** The `script-src` example uses `https://static.cloudflareinsights.com/beacon.min.js/`. CSP path matching treats this trailing slash as a directory prefix, so it matches `/beacon.min.js/*` but not `/beacon.min.js` itself—yet the actual beacon `<script src>` shown on this page loads `beacon.min.js` without a trailing slash.
- **Fix:** Remove the trailing slash: use `https://static.cloudflareinsights.com/beacon.min.js` so the directive matches the beacon script URL.
Code ReviewThis code review is in beta and may not always be helpful — use your judgment. Warnings (1)
ConventionsNo convention issues found. Style Guide ReviewNo style-guide issues found. CommandsOnly codeowners can run commands. Post a comment with the command to trigger it.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Corrected the script-src directive in web analytics FAQ to include a trailing slash to support versioned URLs like https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496
Documentation checklist