fix: expand CSP (#457)

* chore: expand CSP policy to allow https://ecosystem-database.safe.global/

* chore: expand CSP policy to allow connecting to Google Analytics

* chore: increase package version

package.json

@@ -1,7 +1,7 @@
 {
   "name": "safe-homepage",
   "homepage": "https://github.com/safe-global/safe-homepage",
-  "version": "1.4.44",
+  "version": "1.4.45",
   "scripts": {
     "build": "next build && next export",
     "lint": "next lint",

src/config/securityHeaders.ts

@@ -9,15 +9,15 @@ import { IS_PRODUCTION } from '@/config/constants'
  */
 export const ContentSecurityPolicy = `
  default-src 'self';
- connect-src 'self' https://api.ashbyhq.com/posting-api/job-board/safe.global/ https://ecosystem-database.staging.5afe.dev/data.json https://hub.snapshot.org/graphql https://cdn.contentful.com/spaces/1i5gc724wjeu/ https://metrics.hotjar.io/ https://content.hotjar.io/ wss://ws.hotjar.com;
+ connect-src 'self' https://*.google-analytics.com https://api.ashbyhq.com/posting-api/job-board/safe.global/ https://ecosystem-database.safe.global/data.json https://ecosystem-database.staging.5afe.dev/data.json https://hub.snapshot.org/graphql https://cdn.contentful.com/spaces/1i5gc724wjeu/ https://metrics.hotjar.io/ https://content.hotjar.io/ wss://ws.hotjar.com;
  script-src 'self' ${
    IS_PRODUCTION ? '' : "'unsafe-eval'"
  } 'unsafe-inline' https://script.hotjar.com https://static.hotjar.com https://www.googletagmanager.com;
  style-src 'self' 'unsafe-inline';
  font-src 'self';
  object-src 'none';
  base-uri 'none';
- img-src 'self' http://images.ctfassets.net/ https://ecosystem-database.staging.5afe.dev/logos/ https://safe-claiming-app-data.safe.global/guardians/images/ data:;
+ img-src 'self' http://images.ctfassets.net/ https://ecosystem-database.safe.global/logos/ https://ecosystem-database.staging.5afe.dev/logos/ https://safe-claiming-app-data.safe.global/guardians/images/ data:;
  frame-src https://safe.mirror.xyz/ https://www.youtube-nocookie.com/ https://cdn.jwplayer.com/;
 `
   .replace(/\s{2,}/g, ' ')