title: Content security Policy - Refused to load the script from google analytics - CSP rules correct
body: <p>I have a issue when setting CSP rules on server.</p>
  <p>In the server , I set: <strong>Header Content-Security-Policy to:</strong></p>
  <p><code>default-src 'self';script-src 'self' 'report-sample' www.google-analytics.com</code></p>
  <p>When refresh browser , I got :
  <a href="https://i.stack.imgur.com/pIJOY.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/pIJOY.png" alt="enter image description here" /></a></p>
  <p>When check the js source  , it's the library jquery.</p>
  <p>How I can fix it ?
  Thanks</p>
  <p>config csp :
  <a href="https://i.stack.imgur.com/81R9U.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/81R9U.png" alt="enter image description here" /></a></p>
  <p>Error on browser
  <a href="https://i.stack.imgur.com/JYOc7.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/JYOc7.png" alt="enter image description here" /></a></p>