Skip to content

Commit ca72a83

Browse files
committed
Include ethicalads.io domain in CSP header
this is present in the upstream Kiwi TCMS configuration and eventhough it is not used here removing it causes troubles for other downstream builds which rely on this value. For example our public.tenant.kiwitcms.org builds!
1 parent ba5b817 commit ca72a83

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

etc/nginx.openresty

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ http {
8686
}
8787

8888
# WARNING: make sure these match tcms.core.middleware.ExtraHeadersMiddleware
89-
add_header Content-Security-Policy "script-src 'self' cdn.crowdin.com plausible.io;";
89+
add_header Content-Security-Policy "script-src 'self' cdn.crowdin.com *.ethicalads.io plausible.io;";
9090

9191
server {
9292
listen 8080;

testing/test_docker.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -186,7 +186,7 @@ rlJournalStart
186186
rlPhaseEnd
187187

188188
rlPhaseStartTest "Should send Content-Security-Policy header"
189-
rlRun -t -c "curl -k -D- $HTTPS 2>/dev/null | grep $'Content-Security-Policy: script-src \'self\' cdn.crowdin.com plausible.io;'"
189+
rlRun -t -c "curl -k -D- $HTTPS 2>/dev/null | grep $'Content-Security-Policy: script-src \'self\' cdn.crowdin.com \*.ethicalads.io plausible.io;'"
190190
rlPhaseEnd
191191

192192
rlPhaseStartTest "Should send uploads with exactly 1 'Content-Type: text/plain' header"

0 commit comments

Comments
 (0)