From fa360b82089b16e2bbe9348c70cfa4ab9d0aeb11 Mon Sep 17 00:00:00 2001 From: Meet Date: Mon, 7 Oct 2024 18:28:14 +0530 Subject: [PATCH] fix: add CSP directive to allow posthog --- frontend/next.config.js | 1 + 1 file changed, 1 insertion(+) diff --git a/frontend/next.config.js b/frontend/next.config.js index 9b9db1346..e07695ed6 100644 --- a/frontend/next.config.js +++ b/frontend/next.config.js @@ -2,6 +2,7 @@ const path = require("path"); const ContentSecurityPolicy = ` default-src 'self'; + connect-src 'self' https://*.posthog.com; script-src 'self' https://*.posthog.com https://js.stripe.com https://api.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://rsms.me 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; child-src https://api.stripe.com;