CSP for Plausible Analytics: A Real-World Before/After
I’ve seen this pattern a lot: a team wants privacy-friendly analytics, swaps out Google Analytics for Plausible, and suddenly their dashboards are empty because CSP is blocking the script or the event beacons. The funny part is Plausible is usually one of the easier analytics tools to fit into a strict policy. The hard part is not Plausible itself. The hard part is cleaning up the old CSP assumptions that were built around GTM, GA, consent tools, and years of exceptions nobody wants to touch. ...