From 002ebd46e4e97b5d8c1d92a9275061372e53e72f Mon Sep 17 00:00:00 2001
From: Evgeniy Maynagashev <lifesup@gmail.com>
Date: Mon, 29 Mar 2021 13:53:59 +0000
Subject: [PATCH] Add CSP's connect-src directive to config (#547) (#548)

---
 exampleSite/config.toml |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/exampleSite/config.toml b/exampleSite/config.toml
index fdc876f..5f1956f 100644
--- a/exampleSite/config.toml
+++ b/exampleSite/config.toml
@@ -90,6 +90,8 @@
 ]
 scriptsrc = ["'self'", "'unsafe-inline'", "https://www.google-analytics.com"]
 prefetchsrc = ["'self'"]
+# connect-src directive – defines valid targets for to XMLHttpRequest (AJAX), WebSockets or EventSource
+connectsrc = ["'self'", "https://www.google-analytics.com"]
 
 [taxonomies]
 category = "categories"

--
Gitblit v1.10.0