maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-26 06:47:17 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #762 from sharetribe/add-csp-urls

Browse source 
Allowed CSP URLs
This commit is contained in:
Vesa Luusua 2018-03-14 17:54:34 +02:00 • committed by GitHub
commit f3d83b83fc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
server/csp.js
View file

@ -27,6 +27,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const loremPixel = 'https://lorempixel.com/';
const placeholder = 'https://via.placeholder.com/';
const googleAnalytics = 'https://www.google-analytics.com/';
const googleAnalyticsDoubleClick = 'https://stats.g.doubleclick.net/';
const googleMaps = 'https://maps.googleapis.com/';
const googleStaticCsi = 'https://csi.gstatic.com/';
const googleStaticFonts = 'https://fonts.gstatic.com/';
@ -64,6 +65,8 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
// enabled.
scriptSrc.push(googleAnalytics);
imgSrc.push(googleAnalytics);
imgSrc.push(googleAnalyticsDoubleClick);
connectSrc.push(googleAnalytics);
}
if (sentryClientEnabled) {
connectSrc.push(sentryApi);