analytics

Author: ankushKun

frontend/src/widget.html

@@ -8,9 +8,9 @@
     <!-- Content Security Policy for XSS protection -->
     <meta http-equiv="Content-Security-Policy" content="
         default-src 'self';
-        script-src 'self' 'unsafe-inline';
+        script-src 'self' 'unsafe-inline' https://eu-assets.i.posthog.com;
         style-src 'self' 'unsafe-inline';
-        connect-src *;
+        connect-src * https://eu.i.posthog.com;
         frame-ancestors *;
         img-src 'self' data:;
         form-action 'none';