diff options
Diffstat (limited to 'app/controllers/concerns/google_analytics_csp.rb')
-rw-r--r-- | app/controllers/concerns/google_analytics_csp.rb | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/app/controllers/concerns/google_analytics_csp.rb b/app/controllers/concerns/google_analytics_csp.rb new file mode 100644 index 00000000000..1a8e405928d --- /dev/null +++ b/app/controllers/concerns/google_analytics_csp.rb @@ -0,0 +1,24 @@ +# frozen_string_literal: true + +module GoogleAnalyticsCSP + extend ActiveSupport::Concern + + included do + content_security_policy do |policy| + next unless helpers.google_tag_manager_enabled? || policy.directives.present? + + default_script_src = policy.directives['script-src'] || policy.directives['default-src'] + script_src_values = Array.wrap(default_script_src) | ['*.googletagmanager.com'] + policy.script_src(*script_src_values) + + default_img_src = policy.directives['img-src'] || policy.directives['default-src'] + img_src_values = Array.wrap(default_img_src) | ['*.google-analytics.com', '*.googletagmanager.com'] + policy.img_src(*img_src_values) + + default_connect_src = policy.directives['connect-src'] || policy.directives['default-src'] + connect_src_values = + Array.wrap(default_connect_src) | ['*.google-analytics.com', '*.analytics.google.com', '*.googletagmanager.com'] + policy.connect_src(*connect_src_values) + end + end +end |