CSP updates for hotjar

DemocracyLab · Nov 7, 2023 · b86c146 · b86c146
1 parent e174261
commit b86c146
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/democracylab/settings.py b/democracylab/settings.py
@@ -402,7 +402,7 @@ def read_connection_config(config):
     "*.doubleclick.net",
     "*.newrelic.com",
     "*.nr-data.net",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
 )
 CSP_CONNECT_SRC = (
     "'self'",
@@ -412,7 +412,9 @@ def read_connection_config(config):
     "*.google-analytics.com",
     "*.nr-data.net",
     "*.hereapi.com",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
+    "https://*.hotjar.io",
+    "wss://*.hotjar.com",
 )
 CSP_FONT_SRC = (
     "'self'",