Merge pull request #1005 from GSA/1004-csp-add-ga

1004 - Adding GA to connect-src
2026-08-23 15:57:23 -04:00 · 2023-12-13 10:25:52 -05:00
parent 1903b742d7 6297091022
commit 3cc613314e
2 changed files with 10 additions and 2 deletions
--- a/app/init.py
+++ b/app/init.py
@@ -153,7 +153,11 @@ def _csp(config):
            "https://www.google-analytics.com",
            "https://dap.digitalgov.gov",
        ],
-        "connect-src": ["'self'", "https://gov-bam.nr-data.net"],
+        "connect-src": [
+            "'self'",
+            "https://gov-bam.nr-data.net",
+            "https://www.google-analytics.com",
+        ],
        "style-src": ["'self'", asset_domain],
        "img-src": ["'self'", asset_domain, logo_domain],
    }