Mirrors/continuwuity
1
0
Fork 0
mirror of https://forgejo.ellis.link/continuwuation/continuwuity.git synced 2026-05-26 20:49:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix analytics CSP

Browse Source
This commit is contained in:
Jade Ellis
2024-06-16 18:08:52 +01:00
parent 793bc08999
commit 0b1ac24cdd
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/website/csp.js
+3 -2
View File
@@ -3,7 +3,7 @@ const rootDomain = process.env.VITE_DOMAIN; // or your server IP for dev
const cspDirectives = { const cspDirectives = {
'base-uri': ["'self'"], 'base-uri': ["'self'"],
'child-src': ["'self'"], 'child-src': ["'self'"],
'connect-src': ["'self'"], 'connect-src': ["'self'", "https://*.google-analytics.com"],
// 'connect-src': ["'self'", 'ws://localhost:*', 'https://hcaptcha.com', 'https://*.hcaptcha.com'], // 'connect-src': ["'self'", 'ws://localhost:*', 'https://hcaptcha.com', 'https://*.hcaptcha.com'],
'img-src': ["'self'", 'data:'], 'img-src': ["'self'", 'data:'],
'font-src': ["'self'", 'data:'], 'font-src': ["'self'", 'data:'],
@@ -38,7 +38,8 @@ const cspDirectives = {
], ],
'script-src': [ 'script-src': [
'self', 'self',
'unsafe-inline' // chrome suggestion 'unsafe-inline', // chrome suggestion
'https://*.googletagmanager.com'
// 'https://*.stripe.com', // 'https://*.stripe.com',
// 'https://*.facebook.com', // 'https://*.facebook.com',
// 'https://*.facebook.net', // 'https://*.facebook.net',