Allow all of google-analytics in CSP

It needs a tleast both www.google-analytics and ssl.google-analytics..
This commit is contained in:
Magnus Hagander
2018-12-22 16:22:35 +01:00
parent 0d1832dc0d
commit 3606b102b0

View File

@ -42,7 +42,7 @@ class PgMiddleware(object):
sources = OrderedDict([
('default', ["'self'", ]),
('img', ['*', ]),
('script', ["'self'", "www.google-analytics.com"]),
('script', ["'self'", "google-analytics.com"]),
('media', ["'self'", ]),
('style', ["'self'", "fonts.googleapis.com"]),
('font', ["'self'", "fonts.gstatic.com"]),