Add frame-ancestor and cloudflare insights to CSP

migroscomtr · Nov 5, 2024 · a081c8a · a081c8a
1 parent 37a9aa3
commit a081c8a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/prpl.ts b/src/prpl.ts
@@ -137,6 +137,7 @@ export function makeHandler(root?: string, config?: Config): (
         "https://digiavantaj.cake.aclz.net",
         "*.efilli.com",
         "https://analytics.tiktok.com",
+        "*.cloudflareinsights.com"
     ];
 
     const frameSrcAllowedHosts = [
@@ -293,6 +294,7 @@ export function makeHandler(root?: string, config?: Config): (
         + "font-src 'self' data: https://fonts.gstatic.com ; "
         + `img-src data: blob: 'self' 'unsafe-inline' https://*.migrosone.com ${imageSrcAllowedHosts.join(' ')} ; `
         + `frame-src ${frameSrcAllowedHosts.join(' ')} ; `
+        + "frame-ancestor 'self https://*.migros.com.tr"
         + `style-src 'self' 'unsafe-inline' ${styleSrcAllowedHosts.join(' ')} ;`
         + `manifest-src 'self' ; `
         + "worker-src 'self' blob: ;"