fix: add new cdn to CSP whitelist

jst-seminar-rostlab-tum · Dec 22, 2024 · be07d23 · be07d23
1 parent eda5bf4
commit be07d23
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/middleware.ts b/src/middleware.ts
@@ -6,7 +6,7 @@ export function middleware(request: NextRequest) {
     default-src 'self';
     script-src 'self' 'nonce-${nonce}' 'sha256-q1+DaXsZUnEJs3jpN9ZoWp6ypK1xBwXiRxG+C31xOUA=' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' ${process.env.NEXT_PUBLIC_API_URL?.slice(0, -3)};
     style-src 'self' 'unsafe-inline';
-    connect-src 'self' https://region1.google-analytics.com ${process.env.NEXT_PUBLIC_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_V3_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_CHATBOT_API_URL ?? ''};
+    connect-src 'self' https://region1.google-analytics.com https://cdn.hungermapdata.org ${process.env.NEXT_PUBLIC_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_V3_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_CHATBOT_API_URL ?? ''};
     img-src 'self' blob: data: https://static.hungermapdata.org https://dev.api.earthobservation.vam.wfp.org;
     font-src 'self';
     object-src 'none';