💩 Bug Report

A summary of the bug

I set up next.config.js as below aiming at allowing the regular scripts from Analytics and Adsense but getting a number of errors.

I tried adding some of the origins to the config, but how can one be sure to have included all origins that Google may include.

Current behavior

With the following code at `next.config.js:

   async headers() {
    return [
        {
            source: '/(.*)',
            headers: createSecureHeaders({
                contentSecurityPolicy: {
                    directives: {
                        scriptSrc: [
                            "'self'",
                            'https://www.googletagmanager.com',
                            'https://pagead2.googlesyndication.com',
                            'https://partner.googleadservices.com',
                        ],
                    },
                },
            }),
        },
    ];
},

Getting these errors:

To Reproduce

Code above

Expected behavior

Load scripts while keeping secure headers.

Environment

This project version(s): v2.1.0
Nodejs version: v14.15.3
OS: macOS 11.4

Additional context

Add any other context about the problem here, or a screenshot if applicable.

[x] I've tried to find similar issues
[ ] I would like to work on a fix 💪🏻

jagaapple / next-secure-headers

Google Analytics & Adsense errors #51