Merge pull request #829 from LiskHQ/828-gtm-crazyegg-bug

CSP fix - GTM support for CrazyEgg
LiskArchive · Nov 19, 2018 · 33be6c8 · 33be6c8
2 parents 68fcd16 + 0ded2ca
commit 33be6c8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app.js b/app.js
@@ -73,8 +73,8 @@ app.use((req, res, next) => {
 		`connect-src 'self' ${connectSrc};`,
 		`img-src 'self' https:;`,
 		`style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;`,
-		`script-src 'self' 'sha256-L6JyfNh6FtKC6umsFxtawnD4dtWi8szFRQZU0tVgsQk=' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com;`,
-		`font-src 'self' https://fonts.gstatic.com`,
+		`script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ http://*.cloudfront.net/ https://*.ipify.org/ https://*.crazyegg.com;`,
+		`font-src 'self' https://fonts.gstatic.com data:`,
 	].join(' ');
 	/* eslint-enable */