Merge pull request #723 from blockscout/ga-csp

fix GA csp with regional domains

Merge pull request #723 from blockscout/ga-csp
fix GA csp with regional domains
3b6776c8 · Igor Stuev · GitHub · 91285170 · dfe9f4ef · 3b6776c8
Commit 3b6776c8 authored Apr 03, 2023 by Igor Stuev Committed by GitHub Apr 03, 2023
Show whitespace changes
Inline Side-by-side

Showing with 6 additions and 3 deletions

googleAnalytics.ts lib/csp/policies/googleAnalytics.ts +6 -3

No files found.
--- a/lib/csp/policies/googleAnalytics.ts
+++ b/lib/csp/policies/googleAnalytics.ts
@@ -9,18 +9,21 @@ export function googleAnalytics(): CspDev.DirectiveDescriptor {

  return {
    'connect-src': [
+      '*.google-analytics.com',
+      '*.analytics.google.com',
      'https://www.googletagmanager.com',
-      'https://www.google-analytics.com',
      'https://stats.g.doubleclick.net',
    ],
    'script-src': [
      // inline script hash, see ui/shared/GoogleAnalytics.tsx
      '\'sha256-NTmEg2dBnojQfTYrYJEmp3nG7V66756qPbQMCIBrctk=\'',
      'https://www.googletagmanager.com',
-      'https://www.google-analytics.com',
+      '*.google-analytics.com',
+      '*.analytics.google.com',
    ],
    'img-src': [
-      'https://www.google-analytics.com',
+      '*.google-analytics.com',
+      '*.analytics.google.com',
    ],
  };
 }