Allow AdSense through public CSP

32994eda7f7b714a9eae1b7efbac50717050a682 · 2026-09-10 00:54:10 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 32994eda7f7b714a9eae1b7efbac50717050a682
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 10 00:54:10 2026 -0700

    Allow AdSense through public CSP
---
 server.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server.js b/server.js
index ecc3d51..b54d007 100644
--- a/server.js
+++ b/server.js
@@ -33,12 +33,12 @@ app.use(helmet({
       // launcher on every page); its iframe + JS + fetch traffic must be
       // allowed here. Drop the localhost:9935 entries when the named
       // tunnel bigred.agentabrams.com goes live.
-      scriptSrc: ["'self'", "'unsafe-inline'", 'http://localhost:9935', 'https://www.googletagmanager.com', 'https://www.google-analytics.com'],
+      scriptSrc: ["'self'", "'unsafe-inline'", 'http://localhost:9935', 'https://www.googletagmanager.com', 'https://www.google-analytics.com', 'https://pagead2.googlesyndication.com', 'https://*.googlesyndication.com'],
       styleSrc:  ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
       imgSrc:    ["'self'", 'data:', 'https:', 'http://localhost:9935'],
       fontSrc:   ["'self'", 'https://fonts.gstatic.com', 'data:'],
-      connectSrc: ["'self'", 'http://localhost:9935', 'ws://localhost:9935', 'https://www.google-analytics.com', 'https://*.analytics.google.com', 'https://*.googletagmanager.com'],
-      frameSrc:  ["'self'", 'http://localhost:9935'],
+      connectSrc: ["'self'", 'http://localhost:9935', 'ws://localhost:9935', 'https://www.google-analytics.com', 'https://*.analytics.google.com', 'https://*.googletagmanager.com', 'https://pagead2.googlesyndication.com', 'https://*.googlesyndication.com', 'https://googleads.g.doubleclick.net', 'https://*.g.doubleclick.net'],
+      frameSrc:  ["'self'", 'http://localhost:9935', 'https://googleads.g.doubleclick.net', 'https://tpc.googlesyndication.com', 'https://www.google.com'],
       frameAncestors: ["'none'"],
       objectSrc: ["'none'"],
       baseUri:   ["'self'"],

← 2297cd9 Revert "Add auto-updating All News Daily embedded Shorts sec · back to Stars of Design · Keep Stars of Design sitemaps available without database 58c5d31 →