feat(csp): allow shared assets (#10858)

Allow assers from https://mdn.github.io/shared-assets/ managed via GitHub pages in https://github.com/mdn/shared-assets
mdn · May 13, 2024 · 4249546 · 4249546
1 parent fd8cb95
commit 4249546
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/libs/constants/index.js b/libs/constants/index.js
@@ -152,14 +152,24 @@ export const CSP_DIRECTIVES = {
     "wikipedia.org",
     "upload.wikimedia.org",
 
+    // Shared assets.
+    "https://mdn.github.io/shared-assets/",
+
     // GA4.
     "https://*.google-analytics.com",
     "https://*.googletagmanager.com",
 
     "www.gstatic.com",
   ],
   "manifest-src": ["'self'"],
-  "media-src": ["'self'", "archive.org", "videos.cdn.mozilla.net"],
+  "media-src": [
+    "'self'",
+    "archive.org",
+    "videos.cdn.mozilla.net",
+
+    // Shared assets.
+    "https://mdn.github.io/shared-assets/",
+  ],
   "child-src": ["'self'"],
   "worker-src": ["'self'"],
 };