Another try at fixing google analytics vs CSP
authorMagnus Hagander <magnus@hagander.net>
Sat, 22 Dec 2018 15:24:10 +0000 (16:24 +0100)
committerMagnus Hagander <magnus@hagander.net>
Sat, 22 Dec 2018 15:24:10 +0000 (16:24 +0100)
pgweb/util/middleware.py

index 1d9fa9808f3f2d134b22f353bf53ef2c0b458fae..75ad78addb0db43b4eb64f059e499fc6ab8ee3c2 100644 (file)
@@ -42,7 +42,7 @@ class PgMiddleware(object):
                sources = OrderedDict([
                        ('default', ["'self'", ]),
                        ('img', ['*', ]),
-                       ('script', ["'self'", "google-analytics.com"]),
+                       ('script', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
                        ('media', ["'self'", ]),
                        ('style', ["'self'", "fonts.googleapis.com"]),
                        ('font', ["'self'", "fonts.gstatic.com"]),