From 254e651ffa8ac978d2af6a12b04ffe99644e8068 Mon Sep 17 00:00:00 2001 From: Leandro Palazzolo Date: Wed, 7 Feb 2024 16:01:51 -0300 Subject: [PATCH] fix: missing connect-src for GA4 --- next.config.js | 1 + 1 file changed, 1 insertion(+) diff --git a/next.config.js b/next.config.js index e34b192..8777eb9 100644 --- a/next.config.js +++ b/next.config.js @@ -1,6 +1,7 @@ /** @type {import('next').NextConfig} */ const cspHeader = ` default-src 'self'; + connect-src https://www.google-analytics.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://va.vercel-scripts.com/ https://www.google-analytics.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/; style-src 'self' 'unsafe-inline'; img-src 'self' https://avatars.githubusercontent.com/ blob: data:;