From 4ac242d918988855db54aff3578aa73a6d408d2e Mon Sep 17 00:00:00 2001 From: Rotimi Best Date: Wed, 3 Dec 2025 10:28:02 +0100 Subject: [PATCH] fix: add PostHog domains to CSP connect-src - Add https://*.i.posthog.com to both enforcement and reportOnly CSP - Resolves CSP violations blocking PostHog source maps and assets - Fixes blocked requests to recorder.js.map and surveys.js.map This ensures PostHog analytics work properly without CSP violations. --- apps/dashboard/svelte.config.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/dashboard/svelte.config.js b/apps/dashboard/svelte.config.js index d97912d9..0a7b2c9e 100644 --- a/apps/dashboard/svelte.config.js +++ b/apps/dashboard/svelte.config.js @@ -53,7 +53,7 @@ const config = { 'https://api.classroomio.com', 'https://assets.cdn.clsrio.com', 'https://cdn.plyr.io', - 'https://eu.i.posthog.com', + 'https://*.i.posthog.com', 'https://umami.hz.oncws.com', 'https://*.r2.cloudflarestorage.com', 'http://localhost:54321', @@ -100,7 +100,7 @@ const config = { 'https://api.classroomio.com', 'https://assets.cdn.clsrio.com', 'https://cdn.plyr.io', - 'https://eu.i.posthog.com', + 'https://*.i.posthog.com', 'https://umami.hz.oncws.com', 'https://*.r2.cloudflarestorage.com', 'http://localhost:54321',