https://csp-guide.com/tags/umami/ Recent content in Umami on CSP Guide Hugo -- gohugo.io en-us Sat, 22 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-umami-analytics/ Sat, 22 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-umami-analytics/ <p>If you add Umami to a site with a locked-down Content Security Policy, it usually fails in one of two places:</p> <ol> <li>the script never loads</li> <li>the browser blocks the tracking requests</li> </ol> <p>So the CSP work for Umami is usually pretty small: <code>script-src</code> and <code>connect-src</code>, sometimes <code>img-src</code> if you use fallback behavior or custom setups.</p> <p>I like Umami because it’s simpler than the usual analytics stack. That also means the CSP is usually cleaner than the Google Tag Manager + Google Analytics + consent-manager soup you see in production.</p>