Merge pull request #62 from yutotakano/fix-cors

yutotakano · web-flow · commit 2675988cb657 · 2025-09-18T10:44:33.000+02:00
Fix CSP_CONNECT_SRC not including analytics endpoint
diff --git a/backend/backend/settings.py b/backend/backend/settings.py
@@ -223,6 +223,8 @@
     # the Markdown renderer should prevent it from being executed)
     "https://raw.githubusercontent.com/compsoc-edinburgh/betterinformatics/master/_sections/",
     "https://betterinformatics.com/courses.json",
+    # Allow self hosted tracking
+    "https://analytics.betterinformatics.com/api/",
 )
 CSP_IMG_SRC = (
     "'self'",

Original file line number	Diff line number	Diff line change
`@@ -223,6 +223,8 @@`
`223`	`223`	`# the Markdown renderer should prevent it from being executed)`
`224`	`224`	`"https://raw.githubusercontent.com/compsoc-edinburgh/betterinformatics/master/_sections/",`
`225`	`225`	`"https://betterinformatics.com/courses.json",`
	`226`	`+ # Allow self hosted tracking`
	`227`	`+ "https://analytics.betterinformatics.com/api/",`
`226`	`228`	`)`
`227`	`229`	`CSP_IMG_SRC = (`
`228`	`230`	`"'self'",`