Merge pull request #1068 from DemocracyLab/hotjar#1033

CSP updates for hotjar
DemocracyLab · Nov 12, 2023 · f443329 · f443329
2 parents b02d4de + b86c146
commit f443329
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/democracylab/settings.py b/democracylab/settings.py
@@ -402,7 +402,7 @@ def read_connection_config(config):
     "*.doubleclick.net",
     "*.newrelic.com",
     "*.nr-data.net",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
 )
 CSP_CONNECT_SRC = (
     "'self'",
@@ -412,7 +412,9 @@ def read_connection_config(config):
     "*.google-analytics.com",
     "*.nr-data.net",
     "*.hereapi.com",
-    "*.hotjar.com",
+    "https://*.hotjar.com",
+    "https://*.hotjar.io",
+    "wss://*.hotjar.com",
 )
 CSP_FONT_SRC = (
     "'self'",