GPT-guides-content-security-policy Ad Manager docs
Integrate with a Content Security Policy Content Security Policy (CSP) secures your webpage by controlling resource loading and execution, and Google Publisher Tag (GPT) supports strict CSP using nonces. Strict CSP requires setting a Content-Security-Policy header with a random nonce, applied to all script tags including GPT's gpt.js. Cross-domain rendering is necessary with CSP and GPT, enabled by calling googletag.pubads().setForceSafeFrame(true) before ad slots load. To avoid breaking your site, it's recommended to test your CSP policies first using the Content-Security-Policy-Report-Only h
5,728 characters of text.