Feat: update csp (#340)

Author: Anton-rock

helm/values.yaml

@@ -26,7 +26,7 @@ ingress:
   annotations:
     kubernetes.io/tls-acme: "true"
     nginx.ingress.kubernetes.io/configuration-snippet: |
-      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; frame-src 'self'; media-src 'self'; manifest-src 'self'; worker-src 'self'; prefetch-src 'self'; child-src 'self'; block-all-mixed-content; upgrade-insecure-requests; reflected-xss block; referrer no-referrer; feature-policy 'none';";
+      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://cdn.jsdelivr.net https://widget.intercom.io; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://static.intercomassets.com; connect-src 'self' https://www.google-analytics.com https://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.bako.global/socket.io; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://widgetbot.io https://intercom.io https://widget.intercom.io; media-src 'self'; manifest-src 'self'; worker-src 'self'; child-src 'self'; block-all-mixed-content; upgrade-insecure-requests;";
 
 resources:
   requests: