From 16505c9cad480fff2e68b359c3dd5049f28655cd Mon Sep 17 00:00:00 2001 From: Vincent BRIDIER Date: Mon, 26 Jun 2023 14:20:40 +0200 Subject: [PATCH] Fix CSP analytics --- app/Http/Middleware/SecureHeaders.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index ae4cab3..4320d0a 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -45,7 +45,10 @@ class SecureHeaders $cspPolicies = [ // "default-src 'none';", "manifest-src 'self';", - "connect-src 'self' https://*.googletagmanager.com blob:;", + "connect-src 'self' blob: " . \implode(' ', [ + 'https://*.googletagmanager.com', + 'https://*.analytics.google.com' + ]) . ';', "img-src * https://*.googletagmanager.com data: blob:;", 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/',