Update worker-src CSP (#796)

* update worker-src CSP * add google translate to our CSP
base-org · Aug 7, 2024 · a673858 · a673858
1 parent 4b837e3
commit a673858
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/apps/web/next.config.js b/apps/web/next.config.js
@@ -77,7 +77,7 @@ const contentSecurityPolicy = {
     ccaLiteDomains,
     walletconnectDomains,
   ],
-  'worker-src': ['blob:'],
+  'worker-src': ["'self'"],
   'connect-src': [
     "'self'",
     'https://blob.vercel-storage.com', // Vercel File storage
@@ -106,6 +106,7 @@ const contentSecurityPolicy = {
     'https://api.lab.amplitude.com/sdk/v2/vardata',
     'https://browser-intake-datadoghq.com', // datadog
     'https://*.datadoghq.com', //datadog
+    'https://translate.googleapis.com', // Let user translate our website
   ],
   'frame-ancestors': ["'self'", baseXYZDomains],
   'form-action': ["'self'", baseXYZDomains],