@@ -59,7 +59,7 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
59
59
cspDirectiveConnectSrc : {"'self'" },
60
60
cspDirectiveChildSrc : {"'self'" },
61
61
// https://github.com/suren-atoyan/monaco-react/issues/168
62
- cspDirectiveScriptSrc : {"'self' " },
62
+ cspDirectiveScriptSrc : {"'self'" },
63
63
cspDirectiveStyleSrc : {"'self' 'unsafe-inline'" },
64
64
// data: is used by monaco editor on FE for Syntax Highlight
65
65
cspDirectiveFontSrc : {"'self' data:" },
@@ -88,11 +88,6 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
88
88
if telemetry {
89
89
// If telemetry is enabled, we report to coder.com.
90
90
cspSrcs .Append (cspDirectiveConnectSrc , "https://coder.com" )
91
- // These are necessary to allow meticulous to collect sampling to
92
- // improve our testing. Only remove these if we're no longer using
93
- // their services.
94
- cspSrcs .Append (cspDirectiveConnectSrc , meticulousConnectSrc ... )
95
- cspSrcs .Append (cspDirectiveScriptSrc , meticulousScriptSrc ... )
96
91
}
97
92
98
93
// This extra connect-src addition is required to support old webkit
@@ -136,8 +131,3 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
136
131
})
137
132
}
138
133
}
139
-
140
- var (
141
- meticulousConnectSrc = []string {"https://cognito-identity.us-west-2.amazonaws.com" , "https://user-events-v3.s3-accelerate.amazonaws.com" , "*.sentry.io" }
142
- meticulousScriptSrc = []string {"https://snippet.meticulous.ai" , "https://browser.sentry-cdn.com" }
143
- )
0 commit comments