From 07e048679f25eacafafa45c5a922becd513ea359 Mon Sep 17 00:00:00 2001 From: Abner <22141172+Silentely@users.noreply.github.com> Date: Sat, 13 Jun 2026 22:05:41 +0800 Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20fix:=20=E4=BF=AE=E5=A4=8D=20Goog?= =?UTF-8?q?le=20Tag=20Manager=20=E8=84=9A=E6=9C=AC=E6=A0=87=E7=AD=BE?= =?UTF-8?q?=E9=87=8D=E5=A4=8D=E9=97=AD=E5=90=88=E5=AF=BC=E8=87=B4=E7=9A=84?= =?UTF-8?q?=E5=8A=A0=E8=BD=BD=E9=94=99=E8=AF=AF?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 移除 index.html 中 Google gtag.js script 标签末尾多余的 ``，避免 DOM 结构异常 - 保留原有 `defer`、`src`、`crossorigin` 配置，确保延迟加载逻辑不被破坏 - 删除冲突的属性 `integrity` 相关内容，配合当前实际加载方式恢复正常请求行为 --- index.html | 4 ++-- netlify.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/index.html b/index.html index 33908e4..0f7c3f2 100644 --- a/index.html +++ b/index.html @@ -10,7 +10,7 @@ - + eSIM Tools - Giffgaff & Simyo eSIM 在线管理工具 | 设备更换、激活与二维码生成 @@ -587,7 +587,7 @@ - +
diff --git a/netlify.toml b/netlify.toml index ecdf07f..77eb8be 100644 --- a/netlify.toml +++ b/netlify.toml @@ -174,7 +174,7 @@ Referrer-Policy = "strict-origin-when-cross-origin" # 生产 CSP：移除 unsafe-inline，基于 nonce/hash 的策略（页面模板需注入 nonce） # 如暂无模板注入机制，可先允许外链受信源并避免内联脚本 - Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://browser.sentry-cdn.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; connect-src 'self' https://qrcode.show https://api.qrserver.com https://appapi.simyo.nl https://api.giffgaff.com https://id.giffgaff.com https://publicapi.giffgaff.com https://www.google.com https://www.gstatic.com https://*.sentry.io https://cdn.jsdelivr.net https://browser.sentry-cdn.com; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.gstatic.com; manifest-src 'self';" + Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://browser.sentry-cdn.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; connect-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://browser.sentry-cdn.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://qrcode.show https://api.qrserver.com https://appapi.simyo.nl https://api.giffgaff.com https://id.giffgaff.com https://publicapi.giffgaff.com https://www.google.com https://www.gstatic.com https://*.sentry.io; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.gstatic.com; manifest-src 'self';" # Agent 发现 Link 响应头 (RFC 8288) [[headers]]