Fix undefined CSP_CONNECT_SRC

kobotoolbox · Jul 15, 2022 · 7e3fd63 · 7e3fd63
1 parent 98c53be
commit 7e3fd63
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/onadata/settings/base.py b/onadata/settings/base.py
@@ -577,6 +577,7 @@ def skip_suspicious_operations(record):
 if env.bool("ENABLE_CSP", False):
     MIDDLEWARE.append('csp.middleware.CSPMiddleware')
 CSP_DEFAULT_SRC = env.list('CSP_EXTRA_DEFAULT_SRC', str, []) + ["'self'"]
+CSP_CONNECT_SRC = CSP_DEFAULT_SRC
 CSP_SCRIPT_SRC = CSP_DEFAULT_SRC + ["'unsafe-inline'"]
 CSP_STYLE_SRC = CSP_DEFAULT_SRC + ["'unsafe-inline'"]
 CSP_IMG_SRC = CSP_DEFAULT_SRC + ['data:']