diff --git a/layouts/partials/head/script-header.html b/layouts/partials/head/script-header.html index eca91ab013..7ba250d231 100644 --- a/layouts/partials/head/script-header.html +++ b/layouts/partials/head/script-header.html @@ -5,9 +5,9 @@ style-src 'self' edu.chainguard.dev 'unsafe-inline' cdn.jsdelivr.net https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; form-action 'self'; font-src 'self' edu.chainguard.dev https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net https://use.fontawesome.com; - script-src 'self' edu.chainguard.dev *.googleapis.com cdn.jsdelivr.net *.googletagmanager.com 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc=' 'sha256-R2OmoLN/NlJovrWBYuTwjPfAD+YHvBVdudGDjY2VLmI=' https://unpkg.com http://localhost:1313 http://localhost:8080 'unsafe-eval'; - connect-src 'self' *.google-analytics.com https://storage.googleapis.com https://packages.wolfi.dev; - img-src 'self' edu.chainguard.dev https://storage.googleapis.com data:; + script-src 'self' edu.chainguard.dev *.googleapis.com cdn.jsdelivr.net *.googletagmanager.com *.6sc.co and *.6sense.com 'sha256-vOgyKS2vkH4n5TxBJpeh9SgzrE6LVGsAeOAvEST6oCc=' 'sha256-R2OmoLN/NlJovrWBYuTwjPfAD+YHvBVdudGDjY2VLmI=' https://unpkg.com http://localhost:1313 http://localhost:8080 'unsafe-eval'; + connect-src 'self' *.google-analytics.com *.6sc.co and *.6sense.com https://storage.googleapis.com https://packages.wolfi.dev; + img-src 'self' *.6sc.co and *.6sense.com edu.chainguard.dev https://storage.googleapis.com data:; base-uri 'self'; ">