From b86c146c11ff5dedac2ad958158d257ad5d914b1 Mon Sep 17 00:00:00 2001
From: David Fridley <ddfridley@yahoo.com>
Date: Tue, 7 Nov 2023 14:18:44 -0800
Subject: [PATCH] CSP updates for hotjar

---
 democracylab/settings.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/democracylab/settings.py b/democracylab/settings.py
index 5ba9c8b74..5585bcb82 100644
--- a/democracylab/settings.py
+++ b/democracylab/settings.py
@@ -402,7 +402,7 @@ def read_connection_config(config):
     "*.doubleclick.net",
     "*.newrelic.com",
     "*.nr-data.net",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
 )
 CSP_CONNECT_SRC = (
     "'self'",
@@ -412,7 +412,9 @@ def read_connection_config(config):
     "*.google-analytics.com",
     "*.nr-data.net",
     "*.hereapi.com",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
+    "https://*.hotjar.io",
+    "wss://*.hotjar.com",
 )
 CSP_FONT_SRC = (
     "'self'",