Allow GitHub API connection in CSP

Author: philwareham

src/docs/htaccess.txt

@@ -15,7 +15,7 @@
     Header always set X-XSS-Protection "1; mode=block"
     Header always set X-Frame-Options "DENY"
     Header always set X-Content-Type-Options "nosniff"
-    Header set Content-Security-Policy "default-src 'self'; font-src textpattern.io https://textpattern.io; img-src 'self' data: * https://*; media-src 'self' * https://*; style-src 'self' 'unsafe-inline' textpattern.io https://textpattern.io; script-src 'self' 'sha256-YYScNyq3RC/7G7GRTG1R3s34wQFeFysoFR64eLJ0lsQ=' textpattern.io https://textpattern.io"
+    Header set Content-Security-Policy "default-src 'self'; font-src textpattern.io https://textpattern.io; img-src 'self' data: * https://*; media-src 'self' * https://*; style-src 'self' 'unsafe-inline' textpattern.io https://textpattern.io; script-src 'self' 'sha256-YYScNyq3RC/7G7GRTG1R3s34wQFeFysoFR64eLJ0lsQ=' textpattern.io https://textpattern.io; connect-src 'self' api.github.com https://api.github.com"
 
     # Expect-CT (TODO: currently in testing).