yeah couldn’t agree more. The CSP rules clearly lack the necessary https://*.cursor.com source, which is why the analytics script gets blocked. It’s a straightforward configuration oversight.
You’re right. This is a configuration issue on our side. Our CSP policy on cursor.com doesn’t include *.cursor.com in the allowed script sources, so the analytics script gets blocked.
I’ve passed this to the team to fix. Once the configuration is updated, analytics should start working automatically. No action is needed on your side.
Thanks for the detailed debugging, it really helped us pinpoint the cause quickly.
I hope it will start working again as soon as the fix is applied.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
Loading the script '<URL>' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval' <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL> <URL>". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.
6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1 ERROR [Statsig] Failed to parse data
error @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t._typedJsonParse @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
setData @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
_capture @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
e.<computed> @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
useMemo @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useMemo @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useStatsigInternalClientFactoryBootstrap @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useClientBootstrapInit @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
u @ layout-9ecb62ff123d4add.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
l9 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o_ @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
oq @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ik @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iu @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iX @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
w @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1 ERROR [Statsig] StatsigUser not found. You may be using an older server SDK version. Please upgrade your SDK or use setDataLegacy.
error @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
setData @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
_capture @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
e.<computed> @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
useMemo @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useMemo @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useStatsigInternalClientFactoryBootstrap @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
t.useClientBootstrapInit @ 6082-9291ea608fbcf758.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
u @ layout-9ecb62ff123d4add.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
l9 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o_ @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
oq @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ik @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iu @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
iX @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
w @ 93377-b5b23a97c9fdfb0e.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
dashboard:1 <meta name="apple-mobile-web-app-capable" content="yes"> is deprecated. Please include <meta name="mobile-web-app-capable" content="yes">
89566-7b2c2b2df37e4557.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1 [react-tooltip] Do not set `style.opacity`. Use `opacity` prop instead.
(anonymous) @ 89566-7b2c2b2df37e4557.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o1 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
uE @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ux @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2 Highcharts warning: Consider including the "accessibility.js" module to make your chart more usable for people with disabilities. Set the "accessibility.enabled" option to false to remove this warning. See https://www.highcharts.com/docs/accessibility/accessibility-module.
(anonymous) @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
te @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
z @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
warnIfA11yModuleNotLoaded @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
onload @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
firstRender @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
(anonymous) @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
te @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
init @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
a2 @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
chart @ 816865d8-6eadb8516ec018c8.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:2
t @ 99152-3265634c3e91ed4a.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
(anonymous) @ 99152-3265634c3e91ed4a.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
o1 @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
ui @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
uk @ bdeea685-9ab8c6eaa6a63daf.js?dpl=dpl_QiBCuVSUqpSC18vPZhE36ne3G2bE:1
images/logo/logo-dark-theme.mp4:1 GET https://cursor.com/images/logo/logo-dark-theme.mp4 net::ERR_ABORTED 404 (Not Found)
images/logo/logo-dark-theme.mp4:1 GET https://cursor.com/images/logo/logo-dark-theme.mp4 net::ERR_ABORTED 404 (Not Found)