From 5f1b51dc55d56fcc2761b003d54ddb376bc6112a Mon Sep 17 00:00:00 2001
From: Jeroen Boersma <jeroen@srcode.nl>
Date: Tue, 1 Jul 2025 16:09:10 +0200
Subject: [PATCH] Added the scp allowlist if you only use Google Analytics

---
 .../GoogleAnalytics/etc/csp_whitelist.xml     | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 app/code/Magento/GoogleAnalytics/etc/csp_whitelist.xml

diff --git a/app/code/Magento/GoogleAnalytics/etc/csp_whitelist.xml b/app/code/Magento/GoogleAnalytics/etc/csp_whitelist.xml
new file mode 100644
index 0000000000000..b7fda4e9d727c
--- /dev/null
+++ b/app/code/Magento/GoogleAnalytics/etc/csp_whitelist.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+-->
+<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
+    <policies>
+        <policy id="script-src">
+            <values>
+                <value id="google_analytics" type="host">www.google-analytics.com</value>
+            </values>
+        </policy>
+        <policy id="connect-src">
+            <values>
+                <value id="google_analytics" type="host">www.google-analytics.com</value>
+            </values>
+        </policy>
+        <policy id="img-src">
+            <values>
+                <value id="google_analytics" type="host">www.google-analytics.com</value>
+            </values>
+        </policy>
+    </policies>
+</csp_whitelist>