Allow google analytics to do "connect" as well

Based on CSP reports collected
This commit is contained in:
Magnus Hagander
2018-12-29 11:18:05 +01:00
parent ceb90c9d72
commit 0e8feb6afe

View File

@ -43,6 +43,7 @@ class PgMiddleware(object):
('default', ["'self'", ]),
('img', ['*', ]),
('script', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
('connect', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
('media', ["'self'", ]),
('style', ["'self'", "fonts.googleapis.com"]),
('font', ["'self'", "fonts.gstatic.com"]),