Skip to content

Commit b795ee5

Browse files
committed
fix(csp): add google-analytics.com to Content Security Policy
- Add https://www.google-analytics.com to connect-src directive - Add https://*.google-analytics.com for subdomain support - Fixes CSP violation blocking Google Analytics data collection - Allows Google Analytics to send tracking data properly
1 parent a939d4c commit b795ee5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

next.config.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ const nextConfig = {
4343
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
4444
"font-src 'self' https://fonts.gstatic.com data:",
4545
"img-src 'self' data: https: blob:",
46-
"connect-src 'self' https://horizon-testnet.stellar.org https://horizon.stellar.org https://www.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://firestore.googleapis.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://firebaselogging.googleapis.com https://firebaseremoteconfig.googleapis.com https://www.googletagmanager.com wss://horizon-testnet.stellar.org wss://horizon.stellar.org",
46+
"connect-src 'self' https://horizon-testnet.stellar.org https://horizon.stellar.org https://www.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://firestore.googleapis.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://firebaselogging.googleapis.com https://firebaseremoteconfig.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com wss://horizon-testnet.stellar.org wss://horizon.stellar.org",
4747
"frame-src 'self' https://*.youtube.com https://www.youtube.com",
4848
"base-uri 'self'",
4949
"form-action 'self'",

0 commit comments

Comments
 (0)