fix(changelog): enforce CSP (#12831)

oioki · web-flow · commit 2a48a18365ce · 2025-02-27T12:53:16.000+01:00
diff --git a/apps/changelog/vercel.json b/apps/changelog/vercel.json
@@ -16,7 +16,7 @@
           "value": "1; mode=block"
         },
         {
-          "key": "Content-Security-Policy-Report-Only",
+          "key": "Content-Security-Policy",
           "value": "default-src 'none'; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' plausible.io 'unsafe-inline' 'unsafe-eval' 'report-sample'; img-src 'self' changelog.sentry.dev lh3.googleusercontent.com storage.googleapis.com; worker-src blob:; connect-src o1.ingest.us.sentry.io plausible.io 'self' changelog.sentry.dev sentry.io sentry.sentry.io storage.googleapis.com; report-uri https://o1.ingest.us.sentry.io/api/4507670276341760/security/?sentry_key=e90f5ea060a4102c0a4c50c740e43ae1;"
         }
       ]

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@`
`16`	`16`	`"value": "1; mode=block"`
`17`	`17`	`},`
`18`	`18`	`{`
`19`		`- "key": "Content-Security-Policy-Report-Only",`
	`19`	`+ "key": "Content-Security-Policy",`
`20`	`20`	"value": "default-src 'none'; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' plausible.io 'unsafe-inline' 'unsafe-eval' 'report-sample'; img-src 'self' changelog.sentry.dev lh3.googleusercontent.com storage.googleapis.com; worker-src blob:; connect-src o1.ingest.us.sentry.io plausible.io 'self' changelog.sentry.dev sentry.io sentry.sentry.io storage.googleapis.com; report-uri https://o1.ingest.us.sentry.io/api/4507670276341760/security/?sentry_key=e90f5ea060a4102c0a4c50c740e43ae1;"
`21`	`21`	`}`
`22`	`22`	`]`