Fix CSP config

techulus · Jan 3, 2025 · 822e05a · 822e05a
1 parent 7f9b527
commit 822e05a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/apps/page/next.config.js b/apps/page/next.config.js
@@ -2,10 +2,10 @@ const withBundleAnalyzer = require("@next/bundle-analyzer")({});
 
 const ContentSecurityPolicy = `
   script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *;
-  style-src 'self' data: 'unsafe-inline' cdn.zapier.com;
+  style-src 'self' data: 'unsafe-inline';
   img-src 'self' * data:;
   font-src 'self';
-  connect-src 'self' wss: *.supabase.co *.changes.page *.intercom.io *.sentry.io vercel.live;
+  connect-src 'self' wss: *.supabase.co *.changes.page *.intercom.io *.sentry.io vercel.live *.zapier.com;
   report-to default
 `;
 

diff --git a/apps/web/next.config.js b/apps/web/next.config.js
@@ -1,11 +1,11 @@
 const withBundleAnalyzer = require("@next/bundle-analyzer")({});
 
 const ContentSecurityPolicy = `
-  script-src 'self' 'unsafe-eval' 'unsafe-inline' *;
+  script-src 'self' 'unsafe-eval' 'unsafe-inline' *  cdn.zapier.com;
   style-src 'self' data: 'unsafe-inline' maxcdn.bootstrapcdn.com cdn.jsdelivr.net;
   img-src 'self' * data: blob:;
   font-src 'self' data: maxcdn.bootstrapcdn.com cdn.jsdelivr.net;
-  connect-src 'self' wss: *.supabase.co *.changes.page manageprompt.com;
+  connect-src 'self' wss: *.supabase.co *.changes.page manageprompt.com *.zapier.com;
   worker-src 'self' blob:;
   report-to default
 `;