Fixing Google Analytics connect-src CSP header

Lombiq · Apr 16, 2024 · 1b8f892 · 1b8f892
1 parent 973b3c0
commit 1b8f892
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Lombiq.HelpfulLibraries.OrchardCore/Security/GoogleAnalyticsContentSecurityPolicyProvider.cs b/Lombiq.HelpfulLibraries.OrchardCore/Security/GoogleAnalyticsContentSecurityPolicyProvider.cs
@@ -26,6 +26,7 @@ public async ValueTask UpdateAsync(IDictionary<string, string> securityPolicies,
         if (googleAnalyticsIsEnabled)
         {
             CspHelper.MergeValues(securityPolicies, ScriptSrc, "www.googletagmanager.com");
+            CspHelper.MergeValues(securityPolicies, ConnectSrc, "*.google-analytics.com");
         }
     }