diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index 4320d0a..1ec4765 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -46,10 +46,19 @@ class SecureHeaders // "default-src 'none';", "manifest-src 'self';", "connect-src 'self' blob: " . \implode(' ', [ + 'https://*.google-analytics.com', + 'https://*.analytics.google.com', 'https://*.googletagmanager.com', - 'https://*.analytics.google.com' + 'https://*.g.doubleclick.net', + 'https://*.google.com', + ]) . ';', + "img-src * data: blob: " . \implode(' ', [ + 'https://*.google-analytics.com', + 'https://*.analytics.google.com', + 'https://*.googletagmanager.com', + 'https://*.g.doubleclick.net', + 'https://*.google.com', ]) . ';', - "img-src * https://*.googletagmanager.com data: blob:;", 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/', 'https://recaptcha.google.com/recaptcha/',