Merge pull request #147 from breadfinance/magento-csp-whitelist

Magento csp whitelist
getbread · Jan 7, 2021 · 49ee054 · 49ee054
2 parents 6121e0c + b7282a7
commit 49ee054
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/etc/csp_whitelist.xml b/etc/csp_whitelist.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0"?>
+<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
+    <policies>
+        <policy id="script-src">
+            <values>
+                <value id="bread-sandbox-base" type="host">https://checkout-sandbox.getbread.com</value>
+                <value id="bread-production-base" type="host">https://checkout.getbread.com</value>
+            </values>
+        </policy>
+        <policy id="connect-src">
+            <values>
+                <value id="bread-sandbox" type="host">https://checkout-sandbox.getbread.com</value>
+                <value id="bread-production" type="host">https://checkout.getbread.com</value>
+            </values>
+        </policy>
+        <policy id="frame-src">
+            <values>
+                <value id="bread-sandbox" type="host">https://checkout-sandbox.getbread.com</value>
+                <value id="bread-production" type="host">https://checkout.getbread.com</value>
+            </values>
+        </policy>
+    </policies>
+</csp_whitelist>