From b8ec98ef17e79e27c3df710077f1f4f8656b69fd Mon Sep 17 00:00:00 2001 From: Wilfred Asomani Date: Fri, 29 Mar 2024 14:03:50 +0000 Subject: [PATCH] satellite/console: add plausible to csp config This change fixes an issue where loading plausible script will not work because it violates our CSP. Change-Id: I1ed399705310ecbda47027f82038e89adad6da71 --- satellite/console/consoleweb/server.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/satellite/console/consoleweb/server.go b/satellite/console/consoleweb/server.go index 1b0c876917f9..e848e1db225d 100644 --- a/satellite/console/consoleweb/server.go +++ b/satellite/console/consoleweb/server.go @@ -624,6 +624,11 @@ func (server *Server) setAppHeaders(w http.ResponseWriter, r *http.Request) { scriptSrc = appendValues(scriptSrc, recap, gstatic) frameSrc = appendValues(frameSrc, recap, recapSubdomain) } + if server.AnalyticsConfig.Enabled && server.AnalyticsConfig.Plausible.Domain != "" { + plausible := "https://plausible.io" + connectSrc = appendValues(connectSrc, plausible) + scriptSrc = appendValues(scriptSrc, plausible) + } cspValues := []string{ "default-src 'self'", connectSrc,