Skip to content

Commit

Permalink
update csp header
Browse files Browse the repository at this point in the history
  • Loading branch information
AlekseyManetov committed Jul 3, 2024
1 parent 13f6156 commit 468a5d6
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion server/app.js
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ app.use((req, res, next) => {
+ "connect-src 'self' https://*.epam.com https://*.amplitude.com/ wss://menu.epam.com/websocket https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; "
+ 'frame-src *; '
+ 'img-src * data: ; '
+ `script-src 'self' 'unsafe-inline' ${isDevServer() ? "'unsafe-eval'" : ''} https://*.epam.com https://www.googletagmanager.com/ https://www.google-analytics.com/;`,
+ `script-src 'self' 'unsafe-inline' ${isDevServer() ? "'unsafe-eval'" : ''} https://*.epam.com https://www.googletagmanager.com/ https://*.amplitude.com/ https://www.google-analytics.com/;`,
);
res.removeHeader('X-Powered-By');

Expand Down

0 comments on commit 468a5d6

Please sign in to comment.