This is an automated email from the ASF dual-hosted git repository.
sfirke pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new d71e655a4b fix(docs): allow recaptcha in CSP (#32724)
d71e655a4b is described below
commit d71e655a4b7f778e96286a8d66266cb60f98bf83
Author: Evan Rusackas <e...@preset.io>
AuthorDate: Tue Mar 18 11:13:51 2025 -0600
fix(docs): allow recaptcha in CSP (#32724)
---
docs/static/.htaccess | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/static/.htaccess b/docs/static/.htaccess
index 2b66800a88..51be001212 100644
--- a/docs/static/.htaccess
+++ b/docs/static/.htaccess
@@ -22,7 +22,7 @@ RewriteRule ^(.*)$ https://superset.apache.org/$1 [R,L]
RewriteCond %{HTTP_HOST} ^superset.incubator.apache.org$ [NC]
RewriteRule ^(.*)$ https://superset.apache.org/$1 [R=301,L]
-Header set Content-Security-Policy "default-src data: blob: 'self'
*.apache.org widget.kapa.ai *.githubusercontent.com *.scarf.sh *.googleapis.com
*.github.com *.algolia.net *.algolianet.com 'unsafe-inline' 'unsafe-eval';
frame-src *; frame-ancestors 'self' *.google.com https://sidebar.bugherd.com;
form-action 'self'; worker-src blob:; img-src 'self' blob: data: https:;
font-src 'self'; object-src 'none'"
+Header set Content-Security-Policy "default-src data: blob: 'self'
*.apache.org widget.kapa.ai *.githubusercontent.com *.scarf.sh *.googleapis.com
*.google.com *.github.com *.algolia.net *.algolianet.com 'unsafe-inline'
'unsafe-eval'; frame-src *; frame-ancestors 'self' *.google.com
https://sidebar.bugherd.com; form-action 'self'; worker-src blob:; img-src
'self' blob: data: https:; font-src 'self'; object-src 'none'"
# REDIRECTS
