From 6ca472bd3b8fcf18deaca92b37b28a949d62851f Mon Sep 17 00:00:00 2001 From: lazysoundsystem Date: Mon, 2 Dec 2024 16:52:38 +0100 Subject: [PATCH] chore: add mailchimp to csp config Refs: RWR-477 --- config/seckit.settings.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml index 7a594b77..3ea02ddf 100644 --- a/config/seckit.settings.yml +++ b/config/seckit.settings.yml @@ -8,7 +8,7 @@ seckit_xss: webkit: false report-only: false default-src: "'self'" - script-src: "'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com www.gstatic.com https://*.google.com https://*.googletagmanager.com *.google-analytics.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net cdnjs.cloudflare.com ajax.googleapis.com https://cdn.addevent.com https://platform.twitter.com embed.aidaform.com https://cdn.jsdelivr.net https://s3.amazonaws.com https://partner.googleadservices.com" + script-src: "'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com www.gstatic.com https://*.google.com https://*.googletagmanager.com *.google-analytics.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net cdnjs.cloudflare.com ajax.googleapis.com https://cdn.addevent.com https://platform.twitter.com embed.aidaform.com https://cdn.jsdelivr.net https://s3.amazonaws.com https://partner.googleadservices.com https://*.list-manage.com" object-src: "'none'" style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com https://www.google.com fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net https://cdn-images.mailchimp.com" img-src: "'self' data: https://*"