allowing all hosts for connect-src (#759)

MozillaFoundation · Sep 15, 2017 · 201c22c · 201c22c
1 parent 2b29ea1
commit 201c22c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/env.default b/env.default
@@ -35,7 +35,7 @@ CSP_SCRIPT_SRC='self' 'unsafe-inline' cdn.optimizely.com https://www.google-anal
 CSP_STYLE_SRC='self' 'unsafe-inline' code.cdn.mozilla.net fonts.googleapis.com
 CSP_IMG_SRC=* data:
 CSP_FONT_SRC='self' fonts.gstatic.com fonts.googleapis.com code.cdn.mozilla.net
-CSP_CONNECT_SRC='self' ws: *.mozilla.org
+CSP_CONNECT_SRC=*
 CSP_MEDIA_SRC="'self'"
 CSP_CHILD_SRC="'self'"
 CSP_FORM_ACTION='self' https://www.mozilla.org/en-US/newsletter/