Merge pull request #51 from chris-die/master

Adds new domains to default CSP headers.
serato · Jan 10, 2019 · b3199f2 · b3199f2
2 parents a4747f1 + 593ed3e
commit b3199f2
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/Slim/Middleware/CspHeaders.php b/src/Slim/Middleware/CspHeaders.php
@@ -89,7 +89,8 @@ protected function getBaseCspSettings(): array
                 'https://m.cdn.sera.to',
                 'https://u.cdn.sera.to',
                 'https://www.google-analytics.com',
-                'data:'
+                'data:',
+                'https://www.facebook.com'
             ],
             'font-src' => [
                 'https://static.serato.com',
@@ -112,7 +113,8 @@ protected function getBaseCspSettings(): array
                 'https://maxcdn.bootstrapcdn.com/font-awesome/'
             ],
             'frame-src' => [
-                'https://www.google.com/recaptcha/'
+                'https://www.google.com/recaptcha/',
+                'https://vars.hotjar.com/'
             ]
         ];
     }