Update CSP rules

mental-lab · Feb 20, 2024 · d3ebdfb · d3ebdfb
1 parent 756ede1
commit d3ebdfb
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/layouts/partials/head/script-header.html b/layouts/partials/head/script-header.html
@@ -5,9 +5,9 @@
        style-src 'self' edu.chainguard.dev 'unsafe-inline' cdn.jsdelivr.net https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com;
        form-action 'self';
        font-src 'self' edu.chainguard.dev https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net https://use.fontawesome.com;
-       script-src 'self' edu.chainguard.dev *.googleapis.com cdn.jsdelivr.net *.googletagmanager.com 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc=' 'sha256-R2OmoLN/NlJovrWBYuTwjPfAD+YHvBVdudGDjY2VLmI=' https://unpkg.com http://localhost:1313 http://localhost:8080 'unsafe-eval';
-       connect-src 'self' *.google-analytics.com https://storage.googleapis.com https://packages.wolfi.dev;
-       img-src 'self' edu.chainguard.dev https://storage.googleapis.com data:;
+       script-src 'self' edu.chainguard.dev *.googleapis.com cdn.jsdelivr.net *.googletagmanager.com *.6sc.co and *.6sense.com 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc=' 'sha256-R2OmoLN/NlJovrWBYuTwjPfAD+YHvBVdudGDjY2VLmI=' https://unpkg.com http://localhost:1313 http://localhost:8080 'unsafe-eval';
+       connect-src 'self' *.google-analytics.com *.6sc.co and *.6sense.com https://storage.googleapis.com https://packages.wolfi.dev;
+       img-src 'self' *.6sc.co and *.6sense.com edu.chainguard.dev https://storage.googleapis.com data:;
        base-uri 'self';
      ">
 <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no">