fix(dd-rum): add missing host for connect-src (#329)

modified: packages/backend/src/helpers/csp.ts
opengovsg · Nov 15, 2023 · 5040a7b · 5040a7b
1 parent 13f6228
commit 5040a7b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/packages/backend/src/helpers/csp.ts b/packages/backend/src/helpers/csp.ts
@@ -11,6 +11,7 @@ const helmetOptions: HelmetOptions = {
       connectSrc: [
         "'self'",
         // For Datadog RUM
+        'https://browser-intake-datadoghq.com',
         'https://*.browser-intake-datadoghq.com',
         // Launch Darkly feature flags
         'https://*.launchdarkly.com',
@@ -47,6 +48,7 @@ const helmetOptions: HelmetOptions = {
         !appConfig.isDev && 'https://*.apollographql.com',
       ].filter(Boolean),
       upgradeInsecureRequests: [],
+      workerSrc: ['blob:'],
     },
   },
   crossOriginOpenerPolicy: {