Adds analytics url to connect-src CSP

freedomofpress / securethenews

An automated scanner and web dashboard for tracking TLS deployment across news organizations

https://securethe.news

GNU Affero General Public License v3.0

100 stars 29 forks source link

Adds analytics url to connect-src CSP #322

Closed SaptakS closed 3 years ago

SaptakS commented 3 years ago

The new matomo related javascript file makes requests to the analytics servers from within the JS code which is why we need to add https://analytics.freedom.press to connect-src CSP rule

Refs https://github.com/freedomofpress/fpf-www-projects/issues/169