fix csp errors on older versions

sarahs · sarahs · commit f31aa9c75a9b · 2021-01-13T13:32:47.000-05:00
diff --git a/middleware/csp.js b/middleware/csp.js
@@ -56,7 +56,9 @@ module.exports = async (req, res, next) => {
 
   // Exception for Algolia instantsearch in deprecated Enterprise docs (Node.js era)
   if (versionSatisfiesRange(requestedVersion, '<=2.19') && versionSatisfiesRange(requestedVersion, '>2.12')) {
-    csp.directives.scriptSrc.push("'unsafe-eval'")
+    csp.directives.scriptSrc.push("'unsafe-eval'", 'http://www.google-analytics.com')
+    csp.directives.connectSrc.push('https://www.google-analytics.com')
+    csp.directives.imgSrc.push('http://www.google-analytics.com')
   }
 
   // Exception for search in deprecated Enterprise docs <=2.12 (static site era)

Original file line number	Diff line number	Diff line change
`@@ -56,7 +56,9 @@ module.exports = async (req, res, next) => {`
`56`	`56`
`57`	`57`	`// Exception for Algolia instantsearch in deprecated Enterprise docs (Node.js era)`
`58`	`58`	`if (versionSatisfiesRange(requestedVersion, '<=2.19') && versionSatisfiesRange(requestedVersion, '>2.12')) {`
`59`		`- csp.directives.scriptSrc.push("'unsafe-eval'")`
	`59`	`+ csp.directives.scriptSrc.push("'unsafe-eval'", 'http://www.google-analytics.com')`
	`60`	`+ csp.directives.connectSrc.push('https://www.google-analytics.com')`
	`61`	`+ csp.directives.imgSrc.push('http://www.google-analytics.com')`
`60`	`62`	`}`
`61`	`63`
`62`	`64`	`// Exception for search in deprecated Enterprise docs <=2.12 (static site era)`