allow Cloudflare insights in CSP (#20)

climatechangeinformation-org · Feb 13, 2024 · be0fc5f · be0fc5f
1 parent 1c5150a
commit be0fc5f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/public/_headers b/src/public/_headers
@@ -1,3 +1,3 @@
 /*
-	Content-Security-Policy: default-src 'self' https://static.cloudflareinsights.com; script-src 'self' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-VA8O2hAdooB288EpSTrGLl7z3QikbWU9wwoebO/QaYk=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'unsafe-inline'; base-uri 'self'; object-src 'none'; style-src 'self' 'unsafe-inline';
+	Content-Security-Policy: default-src 'self'; connect-src https://cloudflareinsights.com 'self'; script-src https://static.cloudflareinsights.com 'self' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-VA8O2hAdooB288EpSTrGLl7z3QikbWU9wwoebO/QaYk=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'unsafe-inline'; base-uri 'self'; object-src 'none'; style-src 'self' 'unsafe-inline';
 	Access-Control-Allow-Origin: *