-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Labels
Description
💩 Bug Report
A summary of the bug
I set up next.config.js
as below aiming at allowing the regular scripts from Analytics and Adsense but getting a number of errors.
I tried adding some of the origins to the config, but how can one be sure to have included all origins that Google may include.
Current behavior
With the following code at `next.config.js:
async headers() {
return [
{
source: '/(.*)',
headers: createSecureHeaders({
contentSecurityPolicy: {
directives: {
scriptSrc: [
"'self'",
'https://www.googletagmanager.com',
'https://pagead2.googlesyndication.com',
'https://partner.googleadservices.com',
],
},
},
}),
},
];
},
To Reproduce
Code above
Expected behavior
Load scripts while keeping secure headers.
Environment
- This project version(s):
v2.1.0
- Nodejs version:
v14.15.3
- OS:
macOS 11.4
Additional context
Add any other context about the problem here, or a screenshot if applicable.
- I've tried to find similar issues
- I would like to work on a fix 💪🏻