Cant see analytic

Where does the bug appear (feature/product)?

Somewhere else…

Describe the Bug

cant see my analytic in dashboard .

Loading the script ‘https://0ay7zb.cursor.com/analytics/loader-v1.js?key=6f091e8fd6f3c36209a1e08f140c7a4b334baea548f4702052f0732f8d577990’ violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’ https://.vercel.live https://vercel.live https://.vercel-scripts.com https://.posthog.com https://.unifyintent.com https://.cloudfront.net https://pro.ip-api.com https://.liadm.com https://*.usbrowserspeed.com https://alocdn.com https://featureassets.org https://prodregistryv2.org https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://googletagmanager.com”. Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback. The action has been blocked.

Steps to Reproduce

view dashboard

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.2.43 (system setup)
VSCode Version: 1.105.1
Commit: 32cfbe848b35d9eb320980195985450f244b3030
Date: 2025-12-19T06:06:44.644Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.26100

Does this stop you from using Cursor

Yes - Cursor is unusable

Hey, a Content Security Policy error is usually caused by the browser, extensions, or security settings blocking scripts.

Please try:

  1. Disable all browser extensions, especially ad blockers and privacy extensions.
  2. Try a different browser or Incognito/Private mode.
  3. Check your antivirus and firewall settings, they can block script loading.
  4. If you’re on a corporate network or using a VPN, try again without them.

If it still happens after that, please share:

  • Which browser are you using?
  • Which browser extensions are installed?
  • Do you have antivirus software or corporate security policies enabled?

Let me know if any of this helps.

I encounter the same problem. It can be miss configuration on the cursor website CSP.

Analysis from cursor AI:

The fix (for Cursor)

Add to script-src:

https://*.cursor.com https://*.conceptualhq.com

This is a configuration bug on Cursor’s side: they’re blocking their own analytics script.

  • Which browser are you using?
    — chrome Version 137.0.7151.69 (Official Build) (32-bit)

  • Which browser extensions are installed?
    —— do not installed anyone

  • Do you have antivirus software or corporate security policies enabled?
    no , even exit defender and firewall

yeah couldn’t agree more. The CSP rules clearly lack the necessary https://*.cursor.com source, which is why the analytics script gets blocked. It’s a straightforward configuration oversight.

You’re right. This is a configuration issue on our side. Our CSP policy on cursor.com doesn’t include *.cursor.com in the allowed script sources, so the analytics script gets blocked.

I’ve passed this to the team to fix. Once the configuration is updated, analytics should start working automatically. No action is needed on your side.

Thanks for the detailed debugging, it really helped us pinpoint the cause quickly.

I hope it will start working again as soon as the fix is applied.

Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1  ERROR  [Statsig] Failed to parse data
error @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t._typedJsonParse @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
setData @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
_capture @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
e.<computed> @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
useMemo @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useMemo @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useStatsigInternalClientFactoryBootstrap @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useClientBootstrapInit @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
u @ layout-9ecb62ff123d4add.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
l9 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o_ @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
oq @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ik @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iu @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iX @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
w @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1  ERROR  [Statsig] StatsigUser not found. You may be using an older server SDK version. Please upgrade your SDK or use setDataLegacy.
error @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
setData @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
_capture @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
e.<computed> @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
useMemo @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useMemo @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useStatsigInternalClientFactoryBootstrap @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useClientBootstrapInit @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
u @ layout-9ecb62ff123d4add.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
l9 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o_ @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
oq @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ik @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iu @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iX @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
w @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
dashboard:1 <meta name="apple-mobile-web-app-capable" content="yes"> is deprecated. Please include <meta name="mobile-web-app-capable" content="yes">
89566-7b2c2b2df37e4557.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1 [react-tooltip] Do not set `style.opacity`. Use `opacity` prop instead.
(anonymous) @ 89566-7b2c2b2df37e4557.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o1 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
uE @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ux @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2 Highcharts warning: Consider including the "accessibility.js" module to make your chart more usable for people with disabilities. Set the "accessibility.enabled" option to false to remove this warning. See https://www.highcharts.com/docs/accessibility/accessibility-module.
(anonymous) @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
te @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
z @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
warnIfA11yModuleNotLoaded @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
onload @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
firstRender @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
(anonymous) @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
te @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
init @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
a2 @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
chart @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
t @ 99152-3265634c3e91ed4a.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 99152-3265634c3e91ed4a.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o1 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ui @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
uk @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
images/logo/logo-dark-theme.mp4:1  GET https://cursor.com/images/logo/logo-dark-theme.mp4 net::ERR_ABORTED 404 (Not Found)
images/logo/logo-dark-theme.mp4:1  GET https://cursor.com/images/logo/logo-dark-theme.mp4 net::ERR_ABORTED 404 (Not Found)