Merge pull request #998 from streamlit/csp-headers

Add CSP headers for Algolia search

Author: sfc-gh-tteixeira

netlify.toml

@@ -28,6 +28,8 @@ connect-src \
   https://*.auryc.com/ \
   https://www.google-analytics.com/ \
   https://stats.g.doubleclick.net/ \
+  https://*.algolia.net/ \
+  https://*.algolianet.com/ \
 ; \
 default-src 'none' ; \
 font-src 'self' ; \
@@ -52,6 +54,8 @@ script-src \
   https://identity.netlify.com/ \
   https://netlify-cdp-loader.netlify.app/netlify.js \
   https://www.youtube.com/iframe_api/ \
+  https://*.algolia.net/ \
+  https://*.algolianet.com/ \
 ; \
 style-src \
   'self' \

next.config.js

@@ -20,6 +20,8 @@ const CSP_HEADER = [
     "https://*.auryc.com/", // Analytics (Heap)
     "https://www.google-analytics.com/", // Analytics
     "https://stats.g.doubleclick.net/", // Analytics
+    "https://*.algolia.net/", // Search
+    "https://*.algolianet.com/", // Search
   ";",
   "default-src 'none';",
   "font-src 'self';",
@@ -44,6 +46,8 @@ const CSP_HEADER = [
     "https://identity.netlify.com/", // Netlify dev tools
     "https://netlify-cdp-loader.netlify.app/netlify.js", // Netlify dev tools
     "https://www.youtube.com/iframe_api/", // YouTube Embed
+    "https://*.algolia.net/", // Search
+    "https://*.algolianet.com/", // Search
   ";",
   "style-src",
     "'self'",