Skip to content

Instantly share code, notes, and snippets.

@bensternthal
Created November 11, 2016 18:44
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bensternthal/7e11c91834a0fe8cbde28ac65c99dc21 to your computer and use it in GitHub Desktop.
Save bensternthal/7e11c91834a0fe8cbde28ac65c99dc21 to your computer and use it in GitHub Desktop.
diff --git a/bedrock/settings/base.py b/bedrock/settings/base.py
index dede288..5599296 100644
--- a/bedrock/settings/base.py
+++ b/bedrock/settings/base.py
@@ -1113,6 +1113,9 @@ CSP_DEFAULT_SRC = (
'*.mozilla.net',
'*.mozilla.org',
'*.mozilla.com',
+ 'www.google.com',
+ 'cse.google.com',
+
)
CSP_IMG_SRC = CSP_DEFAULT_SRC + (
'data:',
@@ -1122,6 +1125,10 @@ CSP_IMG_SRC = CSP_DEFAULT_SRC + (
'*.tiles.mapbox.com',
'api.mapbox.com',
'creativecommons.org',
+ 'www.googleapis.com',
+ 'clients1.google.com',
+ '*.gstatic.com',
+
)
CSP_SCRIPT_SRC = CSP_DEFAULT_SRC + (
# TODO fix things so that we don't need this
@@ -1134,8 +1141,11 @@ CSP_SCRIPT_SRC = CSP_DEFAULT_SRC + (
'www.googletagmanager.com',
'www.google-analytics.com',
'tagmanager.google.com',
+ 'cse.google.com',
'www.youtube.com',
's.ytimg.com',
+ 'clients1.google.com',
+ 'www.googleapis.com',
)
CSP_STYLE_SRC = CSP_DEFAULT_SRC + (
# TODO fix things so that we don't need this
@@ -1151,6 +1161,7 @@ CSP_CHILD_SRC = (
'accounts.firefox.com',
'accounts.firefox.com.cn',
'www.youtube.com',
+ 'cse.google.com',
)
CSP_CONNECT_SRC = CSP_DEFAULT_SRC + (
'*.optimizely.com',
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment