Merge pull request #1123 from sharetribe/edit-csp

Add events.mapbox.com to connect-src

CHANGELOG.md

@@ -14,6 +14,8 @@ way to update this template, but currently, we follow a pattern:
 
 ## Upcoming version 2019-XX-XX
 
+- [add] Add events.mapbox.com to `connect-src` in `csp.js` file.
+  [#1123](https://github.com/sharetribe/flex-template-web/pull/1123)
 - [change] Verify email automatically once the verification link is clicked. Redirect the user to
   the landing page after verification.
   [#1121](https://github.com/sharetribe/flex-template-web/pull/1121)

server/csp.js

@@ -23,6 +23,7 @@ const defaultDirectives = {
     'maps.googleapis.com',
     '*.tiles.mapbox.com',
     'api.mapbox.com',
+    'events.mapbox.com',
 
     // Google Analytics
     'www.google-analytics.com',