Skip to content

Commit 466d10d

Browse files
committed
MC-37065: [Magento Admin] Fix CSP Issue
- Avoid CSP errors related to Adobe Launch adding domains to csp_whitelist.xml
1 parent e1c5c1d commit 466d10d

File tree

2 files changed

+29
-0
lines changed

2 files changed

+29
-0
lines changed

app/code/Magento/AdminAnalytics/etc/csp_whitelist.xml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,5 +13,19 @@
1313
<value id="adobedtm" type="host">assets.adobedtm.com</value>
1414
</values>
1515
</policy>
16+
<policy id="img-src">
17+
<values>
18+
<value id="adobedtm" type="host">assets.adobedtm.com</value>
19+
<value id="omtrdc" type="host">amcglobal.sc.omtrdc.net</value>
20+
<value id="data" type="host">data:</value>
21+
</values>
22+
</policy>
23+
<policy id="connect-src">
24+
<value id="dpmdemdex" type="host">dpm.demdex.net</value>
25+
<value id="omtrdc" type="host">amcglobal.sc.omtrdc.net</value>
26+
</policy>
27+
<policy id="frame-src">
28+
<value id="amcdemdex" type="host">fast.amc.demdex.net</value>
29+
</policy>
1630
</policies>
1731
</csp_whitelist>
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
<?php
2+
/**
3+
* Copyright © Magento, Inc. All rights reserved.
4+
* See COPYING.txt for license details.
5+
*/
6+
7+
?>
8+
9+
<script>
10+
if (!window.digitalData) {
11+
window.digitalData = {};
12+
}
13+
14+
digitalData.nonce = '123-abc-def-456';
15+
</script>

0 commit comments

Comments
 (0)