From 8824e3fc2d5227618b9db7147c172e9f97c0e535 Mon Sep 17 00:00:00 2001
From: Ilayda Cavusoglu Pars <ilayda.cavusoglupars@canonical.com>
Date: Tue, 10 Sep 2024 15:16:06 +0300
Subject: [PATCH] feat: add missing security header

---
 webapp/handlers.py | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/webapp/handlers.py b/webapp/handlers.py
index 9552a10cb..dbdb0ca31 100644
--- a/webapp/handlers.py
+++ b/webapp/handlers.py
@@ -20,13 +20,9 @@
     "img-src": [
         "'self'",
         "data: blob:",
-        "assets.ubuntu.com",
-        "res.cloudinary.com",
-        "api.charmhub.io",
-        "charmhub.io",
-        "*.cdn.snapcraftcontent.com",
-        "www.googletagmanager.com",
-        "stats.g.doubleclick.net",
+        # This is needed to allow images from
+        # https://www.google.*/ads/ga-audiences to load.
+        "*",
     ],
     "script-src-elem": [
         "'self'",