Config.js. If you're using a different Javascript framework you will likely need to set the same headers using whatever configuration regime your framework uses. Also, when in a dev environment I am using the unsafe-eval header. I am placing an e-commerce system with Laravel and Iyzico, but I am getting http://www.stes.tyc.edu.tw/xoops/modules/profile/edituser.php