From 5df2977751b09a49d2598a8405736e8b8e12c10a Mon Sep 17 00:00:00 2001 From: Kyle Huang Junyuan Date: Tue, 6 Aug 2024 15:37:12 +0800 Subject: [PATCH] fix: csp headers for google analytics (#68) * fix: csp headers for google analytics * fix: syntax of _headers file * fix: invalid character * fix: add 'self' to script-src --- public/_headers | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public/_headers b/public/_headers index 71c4025..485490e 100644 --- a/public/_headers +++ b/public/_headers @@ -1,3 +1,3 @@ /* X-Frame-Options: DENY - Content-Security-Policy: default-src 'self'; connect-src *; frame-ancestors 'none'; \ No newline at end of file + Content-Security-Policy: default-src 'self'; script-src 'self' https://*.googletagmanager.com; connect-src * https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-ancestors 'none'; \ No newline at end of file