fix: allow googletagmanager in CSP

sebald · Nov 2, 2023 · c089715 · c089715 · vercel · Nov 2, 2023
1 parent b9155e8
commit c089715
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/next.config.js b/next.config.js
@@ -1,7 +1,7 @@
 // Security headers (from https://www.yagiz.co/securing-your-nextjs-13-application)
 const ContentSecurityPolicy = `
   default-src 'self' vercel.live;
-  script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.vercel-insights.com vercel.live;
+  script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.vercel-insights.com vercel.live googletagmanager.com;
   style-src 'self' 'unsafe-inline';
   img-src * blob: data:;
   media-src 'none';