Skip to content

Commit 492c6f9

Browse files
fix: add Guidestar to CSP connect-src for service worker caching
- Add widgets.guidestar.org to connect-src directive - Service worker needs connect permission to fetch/cache the SVG seal - Same fix pattern as Cloudinary images
1 parent 7cf4843 commit 492c6f9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

next.config.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ const nextConfig = {
6565
"style-src 'self' 'unsafe-inline'",
6666
"img-src 'self' data: blob: https://res.cloudinary.com https://avatars.githubusercontent.com https://cdn.shopify.com https://widgets.guidestar.org",
6767
"font-src 'self' data:",
68-
"connect-src 'self' https://www.clarity.ms https://vitals.vercel-insights.com https://github.com https://api.github.com https://hashflagswag.myshopify.com https://res.cloudinary.com",
68+
"connect-src 'self' https://www.clarity.ms https://vitals.vercel-insights.com https://github.com https://api.github.com https://hashflagswag.myshopify.com https://res.cloudinary.com https://widgets.guidestar.org",
6969
"frame-src 'self'",
7070
"media-src 'self'",
7171
"object-src 'none'",

0 commit comments

Comments
 (0)