update CSP for google-analytics

Signed-off-by: Brian Forbis <bforbis@athenahealth.com>
2023-05-23 18:34:54 -04:00
parent 2fe9559e6e
commit 8f4056e4a6
1 changed files with 7 additions and 1 deletions
@@ -61,7 +61,13 @@ backend:
  csp:
    connect-src: ["'self'", 'http:', 'https:']
    # Add these two lines below
-    script-src: ["'self'", "'unsafe-eval'", 'https://www.google-analytics.com']
+    script-src:
+      [
+        "'self'",
+        "'unsafe-eval'",
+        'https://www.google-analytics.com',
+        'https://www.googletagmanager.com',
+      ]
    img-src: ["'self'", 'data:', 'https://www.google-analytics.com']
 ```