Skip to content

Commit

Permalink
fix: Nginx CSP rules
Browse files Browse the repository at this point in the history
  • Loading branch information
Aldemylla committed Dec 16, 2024
1 parent f313d61 commit af424cc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion nginx.conf
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ http {
set $CSP_FONT "font-src 'self' fonts.gstatic.com";
set $CSP_STYLE "style-src 'self' 'unsafe-hashes' 'unsafe-inline' ilhasoft.com.br cdnjs.cloudflare.com fonts.googleapis.com";
set $CSP_IMAGE "img-src 'self' data: www.google-analytics.com www.google.com.br www.googletagmanager.com *.amazonaws.com";
set $CSP_CONNECT "connect-src 'self' *.weni.ai *.bothub.it www.google-analytics.com analytics.google.com *.hotjar.io wss://ws.hotjar.com https://s3.amazonaws.com";
set $CSP_CONNECT "connect-src 'self' *.weni.ai *.bothub.it *.amazonaws.com www.google-analytics.com analytics.google.com *.hotjar.io wss://ws.hotjar.com https://s3.amazonaws.com";
set $CSP_FRAME_ANCESTORS "frame-ancestors 'self' *.weni.ai";

add_header Content-Security-Policy "${CSP_DEFAULT}; ${CSP_SCRIPT}; ${CSP_STYLE}; ${CSP_FONT}; ${CSP_IMAGE}; ${CSP_CONNECT}; ${CSP_FRAME_ANCESTORS};";
Expand Down

0 comments on commit af424cc

Please sign in to comment.