Skip to content

Commit 8027ec8

Browse files
authored
Update Search CSP settings (#4285)
1 parent ecc61c1 commit 8027ec8

File tree

1 file changed

+13
-2
lines changed

1 file changed

+13
-2
lines changed

src/server/search_csp.py

Lines changed: 13 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,18 +11,29 @@
1111
"'unsafe-eval'",
1212
],
1313
"font-src": ["'self'"],
14-
"connect-src": ["'self'", "*.google-analytics.com", "www.googletagmanager.com"],
14+
"connect-src": [
15+
"'self'",
16+
"*.google-analytics.com",
17+
"www.googletagmanager.com",
18+
"ep1.adtrafficquality.google",
19+
],
1520
"img-src": [
1621
"'self'",
1722
"*.google-analytics.com",
23+
"www.google.com",
1824
"www.googletagmanager.com",
1925
"www.googleapis.com",
2026
"*.google.com",
2127
"*.gstatic.com",
2228
"ssl.gstatic.com",
2329
"data:",
2430
],
25-
"frame-src": ["'self'", "cse.google.com", "www.googletagmanager.com"],
31+
"frame-src": [
32+
"'self'",
33+
"cse.google.com",
34+
"syndicatedsearch.goog",
35+
"www.googletagmanager.com",
36+
],
2637
"object-src": ["'none'"],
2738
"base-uri": ["'none'"],
2839
}

0 commit comments

Comments
 (0)