aprs.me/lib/aprsme_web/plugs
Graham McIntire 3937dfede7
Configure CSP headers to allow Sentry and CDN scripts
- Added custom content-security-policy to put_secure_browser_headers
- Allowed script sources:
  - https://js.sentry-cdn.com for Sentry SDK
  - https://cdnjs.cloudflare.com for OverlappingMarkerSpiderfier
- Allowed connect sources for Sentry error reporting:
  - https://*.ingest.sentry.io
  - https://*.sentry.io
- Removed custom ContentSecurityPolicy plug in favor of built-in configuration

This properly configures the Content Security Policy to allow all necessary
external resources while maintaining security.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-18 15:30:36 -05:00
..
api_csrf.ex performance improvements 2025-07-08 10:03:52 -05:00
ip_geolocation.ex badpackets formatting 2025-07-12 08:02:51 -05:00
rate_limiter.ex update deps 2025-07-16 08:20:20 -05:00
set_locale.ex passing tests 2025-07-07 16:29:38 -05:00