From aec7751a214508d8abc9f0031ab041f2c1ce8b70 Mon Sep 17 00:00:00 2001 From: xbpcb Date: Wed, 15 Nov 2023 13:43:56 +0200 Subject: [PATCH] HelmetCsp: fix connectSrc for analytics script --- config/helmet-csp.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/config/helmet-csp.js b/config/helmet-csp.js index 9b63dde97..68a7d3c4e 100644 --- a/config/helmet-csp.js +++ b/config/helmet-csp.js @@ -62,7 +62,8 @@ const CSP = { connectSrc: [ 'syndication.twitter.com', 'https://api.github.com/repos/jsdelivr/bootstrapcdn', - 'https://stats.g.doubleclick.net' + 'https://stats.g.doubleclick.net', + 'https://datum.jsdelivr.com/api/event', ], objectSrc: ['img.shields.io'], manifestSrc: ['\'self\'']