mirror of
https://github.com/LukeHagar/website.git
synced 2025-12-07 21:07:44 +00:00
update posthog csp
This commit is contained in:
@@ -40,7 +40,7 @@ const securityheaders: Handle = async ({ event, resolve }) => {
|
||||
|
||||
const cspDirectives = [
|
||||
"default-src 'self'",
|
||||
"script-src 'self' 'unsafe-inline' 'unsafe-eval'",
|
||||
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.posthog.com",
|
||||
"style-src 'self' 'unsafe-inline'",
|
||||
"img-src 'self' data: https:",
|
||||
"font-src 'self'",
|
||||
@@ -50,7 +50,7 @@ const securityheaders: Handle = async ({ event, resolve }) => {
|
||||
"frame-ancestors 'self' https://www.youtube.com https://*.vimeo.com",
|
||||
'block-all-mixed-content',
|
||||
'upgrade-insecure-requests',
|
||||
"connect-src 'self' https://cloud.appwrite.io",
|
||||
"connect-src 'self' https://cloud.appwrite.io https://*.posthog.com",
|
||||
"frame-src 'self' https://www.youtube.com https://status.appwrite.online https://www.youtube-nocookie.com https://player.vimeo.com"
|
||||
];
|
||||
|
||||
|
||||
Reference in New Issue
Block a user