Allow all of google-analytics in CSP

It needs a tleast both www.google-analytics and ssl.google-analytics..

diff --git a/pgweb/util/middleware.py b/pgweb/util/middleware.py
index e9f672ce9f3c7b1a792f0ab5058e5aa6612882ba..1d9fa9808f3f2d134b22f353bf53ef2c0b458fae 100644 (file)
--- a/pgweb/util/middleware.py
+++ b/pgweb/util/middleware.py
@@ -42,7 +42,7 @@ class PgMiddleware(object):
                sources = OrderedDict([
                        ('default', ["'self'", ]),
                        ('img', ['*', ]),
-                       ('script', ["'self'", "www.google-analytics.com"]),
+                       ('script', ["'self'", "google-analytics.com"]),
                        ('media', ["'self'", ]),
                        ('style', ["'self'", "fonts.googleapis.com"]),
                        ('font', ["'self'", "fonts.gstatic.com"]),