feat: add missing security header (#1997)

canonical · Sep 10, 2024 · e5a8a3c · e5a8a3c
1 parent 9711682
commit e5a8a3c
Showing 1 changed file with 3 additions and 7 deletions.
diff --git a/webapp/handlers.py b/webapp/handlers.py
@@ -20,13 +20,9 @@
     "img-src": [
         "'self'",
         "data: blob:",
-        "assets.ubuntu.com",
-        "res.cloudinary.com",
-        "api.charmhub.io",
-        "charmhub.io",
-        "*.cdn.snapcraftcontent.com",
-        "www.googletagmanager.com",
-        "stats.g.doubleclick.net",
+        # This is needed to allow images from
+        # https://www.google.*/ads/ga-audiences to load.
+        "*",
     ],
     "script-src-elem": [
         "'self'",