PXP-11139 Fix/ga csp (#1438)

mfshao · web-flow · commit 44c6617a227c · 2023-10-18T15:24:01.000-05:00
* fix: update csp for ga

* update csp
diff --git a/webpack.config.js b/webpack.config.js
@@ -20,8 +20,8 @@ if (DAPTrackingURL) {
 }
 if (gaTrackingId?.startsWith('UA-') || gaTrackingId?.startsWith('G-')) {
   scriptSrcURLs.push(...['https://www.google-analytics.com', 'https://ssl.google-analytics.com', 'https://www.googletagmanager.com']);
-  connectSrcURLs.push(...['https://www.google-analytics.com', 'https://*.analytics.google.com']);
-  imgSrcURLs.push('https://www.google-analytics.com');
+  connectSrcURLs.push(...['https://www.google-analytics.com', 'https://*.analytics.google.com', 'https://analytics.google.com', 'https://*.g.doubleclick.net']);
+  imgSrcURLs.push('https://www.google-analytics.com', 'https://*.g.doubleclick.net', 'https://*.google.com');
 } else {
   console.log('Unknown GA tag, skipping GA setup...');
 }

Original file line number	Diff line number	Diff line change
`@@ -20,8 +20,8 @@ if (DAPTrackingURL) {`
`20`	`20`	`}`
`21`	`21`	`if (gaTrackingId?.startsWith('UA-') \|\| gaTrackingId?.startsWith('G-')) {`
`22`	`22`	`scriptSrcURLs.push(...['https://www.google-analytics.com', 'https://ssl.google-analytics.com', 'https://www.googletagmanager.com']);`
`23`		`- connectSrcURLs.push(...['https://www.google-analytics.com', 'https://*.analytics.google.com']);`
`24`		`- imgSrcURLs.push('https://www.google-analytics.com');`
	`23`	`+ connectSrcURLs.push(...['https://www.google-analytics.com', 'https://.analytics.google.com', 'https://analytics.google.com', 'https://.g.doubleclick.net']);`
	`24`	`+ imgSrcURLs.push('https://www.google-analytics.com', 'https://.g.doubleclick.net', 'https://.google.com');`
`25`	`25`	`} else {`
`26`	`26`	`console.log('Unknown GA tag, skipping GA setup...');`
`27`	`27`	`}`