feat(CSP): adds hotjar and cloudflare

weni-ai · Jul 26, 2024 · bf82b6c · bf82b6c
1 parent fc6fdbe
commit bf82b6c
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 10 deletions.
diff --git a/nginx.conf b/nginx.conf
@@ -27,9 +27,9 @@ http {
     set $CSP_DEFAULT "default-src 'self'";
     set $CSP_SCRIPT "script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com *.hotjar.com www.google-analytics.com";
     set $CSP_FONT "font-src 'self' fonts.gstatic.com";
-    set $CSP_STYLE "style-src 'self' 'unsafe-hashes' 'unsafe-inline' ilhasoft.com.br fonts.googleapis.com";
+    set $CSP_STYLE "style-src 'self' 'unsafe-hashes' 'unsafe-inline' ilhasoft.com.br cdnjs.cloudflare.com fonts.googleapis.com";
     set $CSP_IMAGE "img-src 'self' data: www.google-analytics.com www.google.com.br www.googletagmanager.com *.amazonaws.com";
-    set $CSP_CONNECT "connect-src 'self' *.weni.ai *.bothub.it www.google-analytics.com analytics.google.com *.hotjar.com";
+    set $CSP_CONNECT "connect-src 'self' *.weni.ai *.bothub.it www.google-analytics.com analytics.google.com *.hotjar.io wss://ws.hotjar.com";
     set $CSP_FRAME_ANCESTORS "frame-ancestors 'self' *.weni.ai";
 
     add_header Content-Security-Policy "${CSP_DEFAULT}; ${CSP_SCRIPT}; ${CSP_STYLE}; ${CSP_FONT}; ${CSP_IMAGE}; ${CSP_CONNECT}; ${CSP_FRAME_ANCESTORS};";

diff --git a/public/index.html b/public/index.html
@@ -21,14 +21,18 @@
   <title>Weni</title>
 
   <script>
-    (function(h,o,t,j,a,r){
-        h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};
-        h._hjSettings={hjid:runtimeVariables.get('VUE_APP_BOTHUB_WEBAPP_HOTJAR_ID'),hjsv:6};
-        a=o.getElementsByTagName('head')[0];
-        r=o.createElement('script');r.async=1;
-        r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;
-        a.appendChild(r);
-    })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');
+    const hotjarId = runtimeVariables.get('VUE_APP_BOTHUB_WEBAPP_HOTJAR_ID');
+
+    if (hotjarId) {
+      (function(h,o,t,j,a,r){
+          h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};
+          h._hjSettings={hjid:hotjarId,hjsv:6};
+          a=o.getElementsByTagName('head')[0];
+          r=o.createElement('script');r.async=1;
+          r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;
+          a.appendChild(r);
+      })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');
+    }
   </script>
 </head>