diff --git a/next.config.js b/next.config.js index 2b5feab3..12d65e2b 100644 --- a/next.config.js +++ b/next.config.js @@ -1,7 +1,7 @@ // Security headers (from https://www.yagiz.co/securing-your-nextjs-13-application) const ContentSecurityPolicy = ` default-src 'self' vercel.live; - script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.vercel-insights.com vercel.live; + script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.vercel-insights.com vercel.live googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src * blob: data:; media-src 'none';