diff --git a/server/server.js b/server/server.js index cd9c5e90..9d4c6c3d 100644 --- a/server/server.js +++ b/server/server.js @@ -45,20 +45,19 @@ app.use( connectSrc: [ "'self'", 'https://sentry.prod.mozaws.net', - 'https://www.google-analytics.com', - 'https://ssl.google-analytics.com' + 'https://www.google-analytics.com' ], imgSrc: [ "'self'", - 'https://www.google-analytics.com', - 'https://ssl.google-analytics.com' + 'https://www.google-analytics.com' ], - scriptSrc: ["'self'", 'https://ssl.google-analytics.com'], + scriptSrc: ["'self'"], styleSrc: ["'self'", 'https://code.cdn.mozilla.net'], fontSrc: ["'self'", 'https://code.cdn.mozilla.net'], formAction: ["'none'"], frameAncestors: ["'none'"], - objectSrc: ["'none'"] + objectSrc: ["'none'"], + reportUri: '/__cspreport__' } }) );