Also remove google analytics from CSP

diff --git a/app.psgi b/app.psgi
index 7bc7437ea97aea04b0c4d2826aedbf1db1eb745f..290ef4b5fb4d41e145032d7fc81599ba03fc889e 100644 (file)
--- a/app.psgi
+++ b/app.psgi
@@ -17,9 +17,9 @@ default-src 'none'
 connect-src 'self'
 form-action 'self'
 frame-ancestors 'none'
-img-src 'self' https://static.mindcoding.ro www.google-analytics.com
+img-src 'self' https://static.mindcoding.ro
 referrer origin-when-cross-origin
-script-src https://static.mindcoding.ro/static/js.js https://www.google-analytics.com/analytics.js
+script-src https://static.mindcoding.ro/static/js.js
 style-src https://static.mindcoding.ro/static/css/
 CSP
        chomp $csp;