From 48bf47b90002a1a3d1692069b5f631ed2bc86272 Mon Sep 17 00:00:00 2001 From: Ivan Augusto <4603111+ivanaugustobd@users.noreply.github.com> Date: Fri, 5 Sep 2025 10:20:29 -0300 Subject: [PATCH] Remove http:// domains from csp_whitelist.xml Google itself recommend allowing only https urls for csp policies --- etc/csp_whitelist.xml | 21 +++++++-------------- 1 file changed, 7 insertions(+), 14 deletions(-) diff --git a/etc/csp_whitelist.xml b/etc/csp_whitelist.xml index 665338e..026e746 100644 --- a/etc/csp_whitelist.xml +++ b/etc/csp_whitelist.xml @@ -3,8 +3,7 @@ - http://www.googletagmanager.com/ - https://www.googletagmanager.com/ + https://www.googletagmanager.com/ @@ -15,28 +14,22 @@ - http://www.googleadservices.com/ - http://www.google-analytics.com/ - https://www.googleadservices.com/ - https://www.google-analytics.com/ + https://www.googleadservices.com/ + https://www.google-analytics.com/ - http://www.googleadservices.com/ - http://www.google-analytics.com/ - https://www.googleadservices.com/ - https://www.google-analytics.com/ + https://www.googleadservices.com/ + https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com - http://stats.g.doubleclick.net/ - https://stats.g.doubleclick.net/ - http://www.google-analytics.com/ - https://www.google-analytics.com/ + https://stats.g.doubleclick.net/ + https://www.google-analytics.com/