Allow google analytics to do "connect" as well

Based on CSP reports collected

diff --git a/pgweb/util/middleware.py b/pgweb/util/middleware.py
index 75ad78addb0db43b4eb64f059e499fc6ab8ee3c2..93260b98e5b4e05c77c0b5dc146844468337ed39 100644 (file)
--- a/pgweb/util/middleware.py
+++ b/pgweb/util/middleware.py
@@ -43,6 +43,7 @@ class PgMiddleware(object):
                        ('default', ["'self'", ]),
                        ('img', ['*', ]),
                        ('script', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
+                       ('connect', ["'self'", "www.google-analytics.com", "ssl.google-analytics.com"]),
                        ('media', ["'self'", ]),
                        ('style', ["'self'", "fonts.googleapis.com"]),
                        ('font', ["'self'", "fonts.gstatic.com"]),