Self-hosted SDK link includes browser.sentry-cdn.com in the JS

[iammattmartin]

Environment

self-hosted (https://develop.sentry.dev/self-hosted/)

What are you trying to accomplish?

Trying to use the SDK javascript but this seems to include browser.sentry-cdn.com in the file.

We're calling from: https://xxxx/js-sdk-loader/xxxxx.min.js.

In the file is:

https://browser.sentry-cdn.com/8.34.0/bundle.tracing.replay.min.

How are you getting stuck?

Given the docs at https://docs.sentry.io/platforms/javascript/install/loader/#content-security-policy it seems to indicate that isn't expected and we should be adding our own hosts in the CSP.

Where in the product are you?

Other

Link

No response

DSN

No response

Version

24.10.0

[getsantry]

Assigning to @getsentry/support for routing ⏲️

[bc-sentry]

Please reopen a support ticket for the SDK.

[souredoutlook]

I have transferred this to sentry-javascript and re-opening.

[souredoutlook]

See this support ticket that has been closed as well: https://sentry.zendesk.com/agent/tickets/138830

[lforst]

The only place where we are using https://browser.sentry-cdn.com in the SDK is the lazyLoadingIntegration.

You can configure a different CDN URL with the cdnBaseUrl option in Sentry.init(), or allowlist the URL.