Merge pull request #2547 from Infisical/meet/eng-1577-lots-of-content-header-issues-in-console

fix: add CSP directive to allow posthog
This commit is contained in:
Meet Shah
2024-10-07 18:56:12 +05:30
committed by GitHub

View File

@@ -2,6 +2,7 @@ const path = require("path");
const ContentSecurityPolicy = `
default-src 'self';
connect-src 'self' https://*.posthog.com;
script-src 'self' https://*.posthog.com https://js.stripe.com https://api.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' 'unsafe-eval';
style-src 'self' https://rsms.me 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com;
child-src https://api.stripe.com;