chore: allow plausible.io in CSP [skip ci]

neherlab · Aug 30, 2022 · 5a1c4f3 · 5a1c4f3
1 parent 4a293f4
commit 5a1c4f3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/infra/web/lambda-at-edge/ViewerResponse.lambda.js b/infra/web/lambda-at-edge/ViewerResponse.lambda.js
@@ -43,7 +43,7 @@ function generatePermissionsPolicyHeader(permissionsPolicyObject) {
 }
 const NEW_HEADERS = {
   'Content-Security-Policy':
-    `default-src 'self' *.pangenome.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.pangenome.org maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com;img-src 'self' data:; connect-src *; frame-src 'self' player.vimeo.com`,
+    `default-src 'self' *.pangenome.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.pangenome.org plausible.io maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com;img-src 'self' data:; connect-src *; frame-src 'self' player.vimeo.com`,
   'Referrer-Policy': 'no-referrer',
   'Strict-Transport-Security': 'max-age=15768000; includeSubDomains; preload',
   'X-Content-Type-Options': 'nosniff',