feat: add missing csp

canonical · Oct 15, 2024 · ba36647 · ba36647
1 parent 1f653ed
commit ba36647
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/webapp/handlers.py b/webapp/handlers.py
@@ -66,6 +66,9 @@
         "cdnjs.cloudflare.com",
         "static.ads-twitter.com",
         "*.cdn.digitaloceanspaces.com",
+        "www.redditstatic.com",
+        "snap.licdn.com",
+        "connect.facebook.net",
         # This is necessary for Google Tag Manager to function properly.
         "'unsafe-inline'",
     ],
@@ -105,6 +108,7 @@
         "player.vimeo.com",
         "js.stripe.com",
         "www.googletagmanager.com",
+        "www.google.com",
         "www.brighttalk.com",
     ],
     "style-src": [