https://csp-guide.com/tags/ghost/ Recent content in Ghost on CSP Guide Hugo -- gohugo.io en-us Mon, 29 Jun 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-ghost-blogging-platform/ Mon, 29 Jun 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-ghost-blogging-platform/ <p>Ghost is pretty clean from a CSP perspective, but the moment you add analytics, consent banners, custom themes, comments, or embeds, things get messy fast.</p> <p>I’ve had the best results treating Ghost like this:</p> <ul> <li>start with a tight baseline policy</li> <li>add only what your theme and integrations actually need</li> <li>avoid <code>unsafe-inline</code> for scripts if you can</li> <li>accept that <code>style-src 'unsafe-inline'</code> is often the practical compromise on Ghost themes unless you control every template</li> </ul> <p>This guide is a reference you can copy from and adjust.</p>