Merge pull request ansible#11897 from kialam/add-csp-for-web-worker

Add d3 to CSP.
john-westcott-iv · Mar 14, 2022 · 2e4d866 · 2e4d866
2 parents f1cc808 + 5be901c
commit 2e4d866
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/awx/ui/public/index.html b/awx/ui/public/index.html
@@ -24,7 +24,7 @@
       </script>
       <meta
         http-equiv="Content-Security-Policy"
-        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io; img-src 'self' *.pendo.io data:;"
+        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io https://d3js.org; img-src 'self' *.pendo.io data:; worker-src 'self';"
       />
       <link rel="shortcut icon" href="{% static 'media/favicon.ico' %}" />
     <% } else { %>