Further define ANDI source

This commit is contained in:
Erin Song 2024-08-15 14:22:07 -07:00
parent f021963964
commit 047b41e25e
No known key found for this signature in database

View file

@ -365,7 +365,7 @@ CSP_SCRIPT_SRC_ELEM = [
"https://www.ssa.gov",
"https://ajax.googleapis.com",
]
CSP_CONNECT_SRC = ["'self'", "https://www.google-analytics.com/", "https://www.ssa.gov"]
CSP_CONNECT_SRC = ["'self'", "https://www.google-analytics.com/", "https://www.ssa.gov/accessibility/andi/andi.js"]
CSP_INCLUDE_NONCE_IN = ["script-src-elem", "style-src"]
CSP_IMG_SRC = ["'self'", "https://www.ssa.gov"]