ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: integrate Google Tag Manager manually to avoid ORB blocking (#8070)

Browse Source
This commit is contained in:
Pablo Lara
2025-06-20 12:47:17 +02:00
committed by GitHub
parent 94f02df11e
commit 80d73cc05b
2 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env
+1 -1
View File
@@ -12,7 +12,7 @@ UI_PORT=3000
# openssl rand -base64 32
AUTH_SECRET="N/c6mnaS5+SWq81+819OrzQZlmx1Vxtp/orjttJSmw8="
# Google Tag Manager ID
NEXT_PUBLIC_GOOGLE_TAG_MANAGER_ID="GTM-XXX"
NEXT_PUBLIC_GOOGLE_TAG_MANAGER_ID=""
#### Prowler API Configuration ####
ui/next.config.js
+19 -19
View File
@@ -3,38 +3,38 @@
// HTTP Security Headers
// 'unsafe-eval' is configured under `script-src` because it is required by NextJS for development mode
const cspHeader = `
img-src 'self';
font-src 'self';
style-src 'self' 'unsafe-inline';
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com;
connect-src 'self' https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://js.stripe.com;
frame-src 'self' https://js.stripe.com/;
frame-ancestors 'none';
default-src 'self'
`
default-src 'self';
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com;
connect-src 'self' https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://js.stripe.com https://www.googletagmanager.com;
img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com;
font-src 'self';
style-src 'self' 'unsafe-inline';
frame-src 'self' https://js.stripe.com https://www.googletagmanager.com;
frame-ancestors 'none';
`;
module.exports = {
poweredByHeader: false,
poweredByHeader: false,
output: "standalone",
async headers() {
return [
{
source: '/(.*)',
source: "/(.*)",
headers: [
{
key: 'Content-Security-Policy',
value: cspHeader.replace(/\n/g, ''),
key: "Content-Security-Policy",
value: cspHeader.replace(/\n/g, ""),
},
{
key: 'X-Content-Type-Options',
value: 'nosniff',
key: "X-Content-Type-Options",
value: "nosniff",
},
{
key: 'Referrer-Policy',
value: 'strict-origin-when-cross-origin',
key: "Referrer-Policy",
value: "strict-origin-when-cross-origin",
},
],
},
]
}
];
},
};