Merge pull request mixxxdj#169 from Holzhaus/netlify-allow-discourse

Netlify: Fix discourse comments blocked by CSP
m0dB · Dec 15, 2020 · d69ce5a · d69ce5a
2 parents 8349b7c + c80733f
commit d69ce5a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/netlify.toml b/netlify.toml
@@ -45,4 +45,4 @@
   for = "/news/*"
   [headers.values]
     # Additionally allow YouTube/Discourse frames and scripts
-    Content-Security-Policy = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'sha256-UPkidoMErzWw1gW/eY4LhAi9ZkPch3PP31d6KQoJ6Yc=' 'sha256-XCSOkdT9euLHstE3pfzL3lwXCbpDeHaVjoQtlRgny60=' https://ssl.google-analytics.com/ga.js https://mixxx.discourse.group/javascripts/embed.js 'sha256-6q+coHkwpyuBHHI7+nDAZewGV9mVIuZU5UJyx19Gdrs='; frame-src 'self' https://www.youtube-nocookie.com https://mixxx.discourse.group ; img-src 'self' https://i.ytimg.com ; connect-src 'self' https://mixxx.discourse.group https://*.discourse-cdn.com"
+    Content-Security-Policy = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com/ga.js https://mixxx.discourse.group/javascripts/embed.js; frame-src 'self' https://www.youtube-nocookie.com https://mixxx.discourse.group ; img-src 'self' https://i.ytimg.com ; connect-src 'self' https://mixxx.discourse.group https://*.discourse-cdn.com"