From 1ec0fe4effef72b2703a726567ebb8cb93a7fca6 Mon Sep 17 00:00:00 2001
From: Vesa Luusua <vesa.luusua@gmail.com>
Date: Wed, 14 Mar 2018 17:33:15 +0200
Subject: [PATCH] Allowed CSP URLs

---
 server/csp.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server/csp.js b/server/csp.js
index 81df3fa4..6c079b38 100644
--- a/server/csp.js
+++ b/server/csp.js
@@ -27,6 +27,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
   const loremPixel = 'https://lorempixel.com/';
   const placeholder = 'https://via.placeholder.com/';
   const googleAnalytics = 'https://www.google-analytics.com/';
+  const googleAnalyticsDoubleClick = 'https://stats.g.doubleclick.net/';
   const googleMaps = 'https://maps.googleapis.com/';
   const googleStaticCsi = 'https://csi.gstatic.com/';
   const googleStaticFonts = 'https://fonts.gstatic.com/';
@@ -64,6 +65,8 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
     // enabled.
     scriptSrc.push(googleAnalytics);
     imgSrc.push(googleAnalytics);
+    imgSrc.push(googleAnalyticsDoubleClick);
+    connectSrc.push(googleAnalytics);
   }
   if (sentryClientEnabled) {
     connectSrc.push(sentryApi);