chore: [ZNO-2102] Extends content security policy to be able fetch im…

…age sources for connect-src
raccoongang · Oct 27, 2023 · a33f843 · a33f843
1 parent a8bf7c9
commit a33f843
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/superset/config.py b/superset/config.py
@@ -1418,6 +1418,7 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
         "worker-src": ["'self'", "blob:"],
         "connect-src": [
             "'self'",
+            "https:",
             "https://api.mapbox.com",
             "https://events.mapbox.com",
         ],
@@ -1436,6 +1437,7 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
         "worker-src": ["'self'", "blob:"],
         "connect-src": [
             "'self'",
+            "https:",
             "https://api.mapbox.com",
             "https://events.mapbox.com",
         ],