fix(header): allow connect-src self

maevsi · Oct 6, 2022 · 1650e01 · 1650e01
1 parent bedd0f3
commit 1650e01
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/nuxt/server/middleware/headers.ts b/nuxt/server/middleware/headers.ts
@@ -19,6 +19,7 @@ function getCsp(host: string): Record<string, Array<string>> {
         : [
             `https://${host}/cdn-cgi/rum`, // Cloudflare real user management (browser insights)
           ]),
+      "'self'",
       `https://postgraphile.${host}`,
       'https://www.google-analytics.com',
     ],