fix: add 'self' to script-src

Open-Attestation · Aug 6, 2024 · 930e67d · 930e67d
1 parent 51ec36c
commit 930e67d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/_headers b/public/_headers
@@ -1,3 +1,3 @@
 /*
   X-Frame-Options: DENY
-  Content-Security-Policy: default-src 'self'; script-src https://*.googletagmanager.com; connect-src * https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-ancestors 'none';
+  Content-Security-Policy: default-src 'self'; script-src 'self' https://*.googletagmanager.com; connect-src * https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-ancestors 'none';