# Refused to load the script 'https://maps.googleapis.com/...' because it violates the following Content Security Policy directive:

**URL:** <https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954>\
**Category:** Kibana\
**Created:** [June 27, 2020, 2:47pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954 "2020-06-27T14:47:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raja\_SP](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raja_sp/32/71237_2.png) [@Raja\_SP](https://discuss.elastic.co/u/Raja_SP)\
**Post date:** [June 27, 2020, 2:47pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954/1 "2020-06-27T14:47:56Z")

</div>

Hi, I am developing a plugin that uses googlemaps api for geofencing purposes. I have the csp.rules configured in kibana.yml as below:

csp.rules:

- "script-src 'unsafe-eval' 'self' '[https://maps.googleapis.com](https://maps.googleapis.com)'"
- "worker-src blob: 'self'"
- "style-src 'unsafe-inline' 'self'"

The error still persists and my map is not getting loaded. I am using version 7.7.0. Appreciate a quick help on what is missing ?

---

<div class="post-metadata">

**Author:** ![Raja\_SP](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raja_sp/32/71237_2.png) [@Raja\_SP](https://discuss.elastic.co/u/Raja_SP)\
**Post date:** [June 27, 2020, 3:28pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954/2 "2020-06-27T15:28:58Z")

</div>

Sorry, it worked once I removed the ' character enclosing the [https://maps.googleapis.com](https://maps.googleapis.com).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 25, 2020, 3:29pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954/3 "2020-07-25T15:29:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.