VladPolskiy/postgres-web
1
0
Fork 0
mirror of https://github.com/postgres/pgweb.git synced 2025-08-10 00:42:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add CSP for GTM.

Browse Source
This commit is contained in:
Dave Page
2020-07-02 16:26:08 +01:00
parent 36277b95a7
commit 95e4ef533d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pgweb/util/middleware.py
View File

@ -46,10 +46,10 @@ class PgMiddleware(object):
sources = OrderedDict([ sources = OrderedDict([
('default', ["'self'", ]), ('default', ["'self'", ]),
('img', ['*', 'data:', ]), ('img', ['*', 'data:', ]),
('script', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com", "data:"]), ('script', ["'unsafe-eval'", "'self'", "www.google-analytics.com", "ssl.google-analytics.com", "www.googletagmanager.com", "tagmanager.google.com", "data:"]),
('connect', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]), ('connect', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
('media', ["'self'", ]), ('media', ["'self'", ]),
('style', ["'self'", "fonts.googleapis.com"]), ('style', ["'self'", "fonts.googleapis.com", "tagmanager.google.com"]),
('font', ["'self'", "fonts.gstatic.com", "data:", ]), ('font', ["'self'", "fonts.gstatic.com", "data:", ]),
]) ])
if hasattr(response, 'x_allow_extra_sources'): if hasattr(response, 'x_allow_extra_sources'):