HelmetCsp: fix connectSrc for analytics script

jsdelivr · Nov 15, 2023 · aec7751 · aec7751
1 parent 6b41074
commit aec7751
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/config/helmet-csp.js b/config/helmet-csp.js
@@ -62,7 +62,8 @@ const CSP = {
     connectSrc: [
         'syndication.twitter.com',
         'https://api.github.com/repos/jsdelivr/bootstrapcdn',
-        'https://stats.g.doubleclick.net'
+        'https://stats.g.doubleclick.net',
+        'https://datum.jsdelivr.com/api/event',
     ],
     objectSrc: ['img.shields.io'],
     manifestSrc: ['\'self\'']