fix: appcues and fullstory csp (#240)

mbta · Jan 23, 2025 · fd75058 · fd75058
1 parent 7a0b09b
commit fd75058
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/orbit_web/router.ex b/lib/orbit_web/router.ex
@@ -23,7 +23,7 @@ defmodule OrbitWeb.Router do
         frame-src 'self' https://*.appcues.com;\
         img-src 'self' https://*.appcues.com https://*.appcues.net res.cloudinary.com cdn.jsdelivr.net;\
         script-src 'self' *.fullstory.com https://*.appcues.com https://*.appcues.net;\
-        script-src-elem 'self' 'unsafe-inline';\
+        script-src-elem 'self' *.fullstory.com https://*.appcues.com https://*.appcues.net 'unsafe-inline';\
         style-src 'self' https://*.appcues.com https://*.appcues.net https://fonts.googleapis.com https://fonts.google.com 'unsafe-inline';\
         "
     }